ed448-goldilocks: reject identity points in Group::try_from_rng()

Author: daxpedda

ed448-goldilocks/src/decaf/points.rs

@@ -178,7 +178,10 @@ impl Group for DecafPoint {
 
         loop {
             rng.try_fill_bytes(bytes.as_mut())?;
-            if let Some(point) = Self::from_bytes(&bytes).into() {
+            if let Some(point) = Self::from_bytes(&bytes)
+                .into_option()
+                .filter(|point| point != &Self::IDENTITY)
+            {
                 return Ok(point);
             }
         }

ed448-goldilocks/src/edwards/extended.rs

@@ -345,7 +345,10 @@ impl Group for EdwardsPoint {
 
         loop {
             rng.try_fill_bytes(bytes.as_mut())?;
-            if let Some(point) = Self::from_bytes(&bytes).into() {
+            if let Some(point) = Self::from_bytes(&bytes)
+                .into_option()
+                .filter(|point| point != &Self::IDENTITY)
+            {
                 return Ok(point);
             }
         }