fix(MSM - #366): edge case when scalar bits are divided by MSM 'c' parameter

mratsim / constantine

Constantine: modular, high-performance, zero-dependency cryptography stack for proof systems and blockchain protocols.

Other

272 stars 38 forks source link

Closed mratsim closed 2 days ago

mratsim commented 2 days ago

This fixes #366

Here is the sequence of events.

22529 input coefficients of size 254 bits
After endomorphism computation, they are transformed into 90116 coefficients of size 65 bits
90116 maps to an MSM parameter c of 13
13 divides 65 exactly and triggers a bug where 1 mini-MSM iteration is missing.