mirror of
https://github.com/saymrwulf/betrusted-ed25519-verified.git
synced 2026-09-03 20:13:47 +00:00
verify_accepts_iff_point_eq, button-enforced Port of dalek's PointEqSpec (the encoding-injectivity mathematics is fork-independent; compiled first try): for any valid on-curve point Q whose canonical encoding is the signature's R bytes, the verifier accepts IFF Q equals the recomputed point as denoted affine points - the literal point-level EdDSA verification equation, no decompress needed. enc_point_inj carries the standard three axioms; the equation itself carries exactly this fork's enforced apex boundary, and Phase 3b now audits all three tiers (byte apex, half-lift, point equation). Full button green fresh. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| gen | ||
| Proofs | ||
| check-scalar.sh | ||
| check.sh | ||
| CurveField.llbc | ||
| CurveSig.llbc | ||
| extract.sh | ||
| lean-guard | ||