First up, thanks for sharing that trick! Very neat stuff.
A minor nit: reference [4], i.e., the original publication of the Goldilocks curve and the Goldilocks prime[^1] never mentions $2^{64} - 2^{32} + 1$. Reference [5] introduces that prime (albeit probably not for the first time in history), but never mentions the word “Goldilocks.” Apparently, these two things started being associated with one another but as far as I can see, there's some naming collision happening. Would be interesting to know how that came to be.
[^1]: “I chose the Solinas trinomial prime $p :=2^{448} − 2^{224} − 1$. I call this the ‘Goldilocks’ prime because
its form defines the golden ratio $\phi = 2^{224}.$.
Refers to the paper “Goldilocks NTT Trick.”
First up, thanks for sharing that trick! Very neat stuff.
A minor nit: reference [4], i.e., the original publication of the Goldilocks curve and the Goldilocks prime[^1] never mentions $2^{64} - 2^{32} + 1$. Reference [5] introduces that prime (albeit probably not for the first time in history), but never mentions the word “Goldilocks.” Apparently, these two things started being associated with one another but as far as I can see, there's some naming collision happening. Would be interesting to know how that came to be.
[^1]: “I chose the Solinas trinomial prime $p :=2^{448} − 2^{224} − 1$. I call this the ‘Goldilocks’ prime because its form defines the golden ratio $\phi = 2^{224}.$.