paulmillr / scure-starknet

Audited & minimal JS implementation of Starknet cryptography.
MIT License
69 stars 7 forks source link

question about fast pedersen hash implementation #9

Open sc0Vu opened 2 months ago

sc0Vu commented 2 months ago

Thanks for this great library. The robust features and functionality it provides have been invaluable to my projects.

I have recently come across the Fast Pedersen Hash implementation in Cairo Lang, which appears to maintain constant-time execution as seen in its source code (https://github.com/starkware-libs/cairo-lang/blob/master/src/starkware/crypto/signature/fast_pedersen_hash.py). However, the Pedersen Hash implementation in the library may not be constant-time. I wonder if there have been any considerations or plans to incorporate a constant-time Fast Pedersen Hash implementation into this library.

paulmillr commented 2 months ago

Why? What is your threat model?