Document open issue around small-order checks in EdDSA

index.html

@@ -1872,13 +1872,19 @@ <h4>Operations</h4>
                 If the key data of |key| represents an invalid point or a small-order element
                 on the Elliptic Curve of Ed25519, return `false`.
               </p>
+              <p class="issue" data-number="27">
+                Not all implementations perform this check.
+              </p>
             </li>
             <li>
               <p>
                 If the point R, encoded in the first half of |signature|,
                 represents an invalid point or a small-order element
                 on the Elliptic Curve of Ed25519, return `false`.
               </p>
+              <p class="issue" data-number="27">
+                Not all implementations perform this check.
+              </p>
             </li>
             <li>
               <p>
@@ -2765,13 +2771,19 @@ <h4>Operations</h4>
                 If the key data of |key| represents an invalid point or a small-order element
                 on the Elliptic Curve of Ed448, return `false`.
               </p>
+              <p class="issue" data-number="27">
+                Not all implementations perform this check.
+              </p>
             </li>
             <li>
               <p>
                 If the point R, encoded in the first half of |signature|,
                 represents an invalid point or a small-order element
                 on the Elliptic Curve of Ed448, return `false`.
               </p>
+              <p class="issue" data-number="27">
+                Not all implementations perform this check.
+              </p>
             </li>
             <li>
               <p>