filippo.io/edwards25519 — A safer, faster, and more powerful low-level edwards25519 Go implementation.
BSD 3-Clause "New" or "Revised" License
137
stars
30
forks
source link
Add Point method to check prime order subgroup inclusion #33
Open
FiloSottile opened 2 years ago
Naively, we can do this by multiplying by l and checking if we get the infinity.
That multiplication can be precomputed as an addition chain generated with addchain.
Eventually, we should use Pronin's technique described in https://eprint.iacr.org/2022/1164.pdf.