mrwulf de8bbf1e9e Double-scalar-mul enters the verified model: vartime_double_base extracted transparently ... extract.sh now opens crate::backend::serial::scalar_mul::vartime_double_base (the other scalar_mul strategies stay opaque): non_adjacent_form (with its loops), NafLookupTable5 (from/select), the curve-model helpers and vartime_double_base::mul itself land in gen/CurveField - the same namespace as the proven edwards operations, so the coming double-and-add induction can consume EdDouble/EdAddProjNiels/EdConvert directly. Zero sorries, zero external axioms (the pinned sources carry documented compat refactors: single-assignment loop helpers, param-rooted while, always-256-iterations, index-based LE load). Full check.sh pressed fresh over the regenerated model: every existing field and group-law certificate still green and axiom-clean - the scope extension is purely additive.		2026-07-04 12:20:35 +02:00
..
CurveField	Double-scalar-mul enters the verified model: vartime_double_base extracted transparently	2026-07-04 12:20:35 +02:00
CurveScalar	Hash-to-scalar PROVEN: from_bytes_wide_spec - Scalar::from_hash's reduction is exact mod l	2026-07-04 11:00:49 +02:00