Closed dtebbs closed 3 years ago
Related to: https://github.com/clearmatics/libff/issues/16
It could be problematic to do these checks by default when deserializing. At least with the naive versions here.
Deserialising anything sizable is unfeasible, so we may have to default to no checks and add read_*_safe
functions as per the original description.
Updated this PR to include only the addition of the (unoptimized) is_in_safe_subgroup
. Performing these checks on load can be addressed as part of another PR.
Safe subgroup membership check methods. These methods are generic, relying on large scalar multiplications. More optimal per-curve checks may be added in a future PR.