saymrwulf/risc0-curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/risc0-curve25519-dalek-source.git synced 2026-09-05 20:10:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Eliminate extra inversions in MontgomeryPoint.ct_eq().

Browse source
This commit is contained in:
Isis Lovecruft 2017-10-05 01:32:44 +00:00
parent 7e4fd5677c
commit 5e6e6c3fa8
Failed to extract signature
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/montgomery.rs
View file

@ -257,8 +257,9 @@ impl Identity for MontgomeryPoint {
/// `1` if the points are equal, and `0` otherwise.
impl Equal for MontgomeryPoint {
fn ct_eq(&self, that: &MontgomeryPoint) -> u8 {
slices_equal(self.compress().as_bytes(),
that.compress().as_bytes())
// (U_P:W_P) = (U_Q:W_Q) iff U_P * W_Q == U_Q * W_P,
// since U_P/W_P == U_Q/W_Q.
(&self.U * &that.W).ct_eq(&(&self.W * &that.U))
}
}