Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
Wim Lewis
nettle
Commits
2d4b582e
Commit
2d4b582e
authored
Jan 27, 2015
by
Niels Möller
Browse files
Fix comment on the ecc_add_ehh formulas.
parent
f8870f78
Changes
1
Hide whitespace changes
Inline
Side-by-side
ecc-add-ehh.c
View file @
2d4b582e
...
...
@@ -55,25 +55,25 @@ ecc_add_ehh (const struct ecc_curve *ecc,
#define z3 (r + 2*ecc->p.size)
/* Formulas (from djb,
http://www.hyperelliptic.org/EFD/g1p/auto-edwards-projective.html#
doubling-dbl
-2007-bl):
http://www.hyperelliptic.org/EFD/g1p/auto-edwards-projective.html#
addition-add
-2007-bl):
Computation Operation Live variables
C = x1*x2 mul C
D = y1*y2 mul C, D
T = (x1+y1)(x2+y2) - C - D
C, D, T
T = (x1+y1)(x2+y2) - C - D
, mul
C, D, T
E = b*C*D 2 mul C, E, T (Replace C <-- D - C)
A = z1*z2 mul A, C, E, T
B = A^2 sqr A, B, C, E, T
F = B - E A, B, C, E, F, T
G = B + E A, C, F, G, T
x3 = A*F*T
3
mul A, C, G
x3 = A*F*T
2
mul A, C, G
y3 = A*G*(D-C) 2 mul F, G
z3 = F*G mul
But when working with the twist curve, we
need to the factor
x1*x2. We need to switch sign in y3 expressions,
a
n
d
swap F and
G.
But when working with the twist curve, we
have to negate the
factor C = x1*x2. We change subtract to
a
d
d
in the y3
expression, and swap F and
G.
*/
#define C scratch
#define D (scratch + ecc->p.size)
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment