mirror of
https://github.com/saymrwulf/curve25519-dalek-source.git
synced 2026-09-04 20:24:10 +00:00
389d2bc9e2
When using Scalar::from_bits to manually create unreduced Scalars (e.g., X/Ed25519 keys with specified bit patterns), it's possible to construct Scalar values that range up to 2^255-1. These shouldn't ever end up in a vartime multiscalar mul call anyways, because it doesn't handle secret data, but it is technically allowed by the type system and should be handled. When w=8, these can generate terminal carries that can't be folded into the last digit, but this can be handled by folding them into an extra digit instead. |
||
|---|---|---|
| .. | ||
| backend | ||
| constants.rs | ||
| edwards.rs | ||
| field.rs | ||
| lib.rs | ||
| macros.rs | ||
| montgomery.rs | ||
| prelude.rs | ||
| ristretto.rs | ||
| scalar.rs | ||
| traits.rs | ||
| window.rs | ||