saymrwulf/curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/curve25519-dalek-source.git synced 2026-09-06 20:41:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Aeneas-compat: index-based LE word load in non_adjacent_form

Browse source 
Pure refactor, semantics identical: the read_le_u64_into call (whose
chunks/zip iterators are opaque to the extraction) becomes an explicit
nested index loop, the same shape as the proven from_bytes_wide unpack.
With this the entire vartime_double_base::mul extraction closure is
self-contained: zero external axioms, zero sorries.
This commit is contained in:
mrwulf 2026-07-04 11:39:10 +02:00
parent 1bd5990856
commit 8c2519a15a
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
curve25519-dalek/src/scalar.rs
View file

@ -961,7 +961,20 @@ impl Scalar {
let mut naf = [0i8; 256]; let mut naf = [0i8; 256];
let mut x_u64 = [0u64; 5]; let mut x_u64 = [0u64; 5];
read_le_u64_into(&self.bytes, &mut x_u64[0..4]); // AENEAS-COMPAT: index-based little-endian load instead of
// read_le_u64_into (its chunks/zip iterators are opaque to the
// extraction). Pure refactor, semantics identical.
let mut k: usize = 0;
while k < 4 {
let mut t: u64 = 0;
let mut bi: usize = 0;
while bi < 8 {
t |= (self.bytes[8 * k + bi] as u64) << (8 * bi);
bi += 1;
}
x_u64[k] = t;
k += 1;
}
let width = 1 << w; let width = 1 << w;
let window_mask = width - 1; let window_mask = width - 1;