-
Hello, H2C team.
Michel, Julia and I (Björn) are currently working on a security proof for CPace, where the main complexity is to properly deal with the different flavours of mapping and their spec…
-
It should be a common task to add smaller scalar (e.g. Jubjub scalar) to a circuit over a larger scalar field (e.g. BLS), and right now there's no clear API from the library that support such conversi…
-
Previously we considered and rejected the idea of using an algebraic PRF rather than BLAKE2s in the circuit (discussed at #2630, https://github.com/zcash/zcash/issues/2234#issuecomment-315726396, and …
daira updated
3 years ago
-
## Context
Currently after each addition or substraction steps there is a reduction done if the result is over the field modulus.
Due to constant-time constraints, there is no shortcut if it is …
-
Presently, the `k256` crate implements montgomery mulmod for multiplication/reduction. @hdevalence brought up a point in #19 that there may be a method that leverages the special form of the secp256k1…
tuxxy updated
3 years ago
-
For example,
* we probably no longer want to use MixingPedersenHash;
* cofactor multiplication is not necessary for Tweedledee.
This includes things like specifying note commitments, nullifier ca…
daira updated
3 years ago
-
The computation of _d_ does not seem to be correct.
https://github.com/feketebv/Montgomery_multiplication/blob/1032ecb0d73e8af48d662d328231f784b6d8fde2/rsa_plain.py#L6
-
Hi,
thanks for your very nice work on fiat. We are using it (https://github.com/mirage/fiat) - with (not verfied) inversion, point_double and point_add function to compute ECDH P256. Now I've a que…
-
I tried implementing an algorithm based on the following property:
`g^x == g^(x*1) == g^(x * (s * inv(s))) == (g^s)^(x * inv(s))`,
but I can't get it (or the simpler one: `g == (g^s)^inv(s)`) to wo…
-
Hi all,
First of all, apologies for the long message, and thank you for bringing the NTT Multiplication to NTT-unfriendly rings!
I spent some time optimizing the NTT-based Saber Cortex-m4 imple…