saymrwulf/curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/curve25519-dalek-source.git synced 2026-09-06 20:41:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Stub out remaining sections, add overview of batching

Browse source
This commit is contained in:
Henry de Valence 2018-04-05 14:00:23 -07:00
parent b713274890
commit 35c18cfc51
1 changed files with 15 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
docs/ristretto-notes.md
View file

@ -407,16 +407,25 @@ The choice of \\( Q\_4 = (i, 0) \\) when \\( a = -1 \\) is convenient since it s
## Decoding to Extended Coordinates ## Decoding to Extended Coordinates
## Batched Double-and-Encode Using \\( \hat \theta \\)
The encoding is not batchable, since it requires an inverse square
root. However, since \\( \theta \circ \hat \theta = [2] P \\), it's
possible to compute the encoding of \\( [2]P \\) by using \\( \hat
\theta \\) instead of \\( \theta^{-1} \\). Since \\( \hat \theta \\) only
requires inversions, given \\( P\_1, \ldots, P\_n \\), it's possible
to compute the encodings of \\( [2]P\_1, \ldots, [2]P\_n \\) in a
batch.
XXX write up details
## Equality Testing ## Equality Testing
XXX write up details
## Elligator ## Elligator
## The Double-Ristretto Encoding XXX write up details
It's possible to do batch encoding of \\( [2]P \\) using the dual
isogeny \\(\hat{\theta}\\). Defer this for now.
## ???
[ristretto_sage]: https://sourceforge.net/p/ed448goldilocks/code/ci/master/tree/aux/ristretto/ristretto.sage [ristretto_sage]: https://sourceforge.net/p/ed448goldilocks/code/ci/master/tree/aux/ristretto/ristretto.sage
[ristretto_libdecaf]: https://sourceforge.net/p/ed448goldilocks/code/ci/master/tree/ [ristretto_libdecaf]: https://sourceforge.net/p/ed448goldilocks/code/ci/master/tree/