-
The classic definition of the Montgomery form is
B * y^2 = x^3 + A * x^2 + x
whereas the Elligator paper works in the following slightly different form
y'^2 = x'^3 + A' * x'^2 + B' * …
-
### Challenge description:
Since most emails are signed cryptographically through DKIM, and contain enough data to prove who the sender is (from wikipedia: "the From: field must always be signed"),…
-
In response to Jaguar's recent Twitter post regarding improvement and review, here are comments and suggestions up to page 10.
Document-Wide Comments
Presumably all references to Catapult should…
-
### Ktor Version
1.1.2
### Ktor Engine Used(client or server and name)
Ktor client with default engine
### JVM Version, Operating System and Relevant Context
JDK 1.8, Windows, Kotlin JS
#…
-
Since the curve that Sean provided in:
Here's an "embedded" curve over ristretto255's scalar field-x^2 + y^2 = 1 - (86649/86650)x^2y^2which is Ristretto-ready and birationally equ…
-
We intend to use an EdDSA signature on the Jubjub curve to authorize spends. The original Ed25519 scheme made some assumptions might not be applicable to the Jubjub curve.
Generalised EdDSA is spec…
daira updated
4 years ago
-
Now that the `zcash_primitives` crate [has been published](https://docs.rs/zcash_primitives/0.1.0/zcash_primitives/index.html) and we have mostly finished the networking code, we should analyze the ov…
-
This issue lives under the item: https://gitlab.dusk.network/dusk-org/tech/issues/1
Create a document to show that Doppio meets the safe curve criteria.
Listed at https://safecurves.cr.yp.to/
-
I can create a standard pair of keys with crypto_box_keypair(publicKey, privateKey) and with that I can encrypt a message using the public key, and then decrypt it with the private key
But should t…
-
As per D.J.Bernstein, for Edwards curves is is sufficient to use only the X coordinate for a compressed point representation.
https://twist.com/a/39362/ch/95451/t/830513/