risc0-curve25519-dalek-source/curve25519-dalek/src
mrwulf d58065f735 Aeneas-compat: decompress step_2 negate-then-conditional-assign
Same documented rewrite as FieldElement::sqrt_ratio_i: semantically
identical and still constant-time, but avoids subtle's
ConditionallyNegatable blanket impl, which the verification toolchain
cannot translate. Unblocks extracting decompress for the phase-2 full
point-level lift.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-06 01:41:54 +02:00
..
backend Aeneas-compat: make vartime_double_base::mul extraction-clean 2026-07-04 11:10:34 +02:00
constants.rs add support for RISC Zero cryptographic accelerators 2025-09-26 17:00:25 -07:00
diagnostics.rs Workspace curve25519 under curve25519-dalek 2023-06-27 04:00:12 +00:00
edwards.rs Aeneas-compat: decompress step_2 negate-then-conditional-assign 2026-07-06 01:41:54 +02:00
field.rs patch: remove ConditionallyNegatable for Aeneas/Charon transpilation 2026-06-30 17:30:36 +02:00
lib.rs Mitigate check-cfg until MSRV 1.77 (#652) 2024-05-09 07:24:16 -06:00
macros.rs Workspace curve25519 under curve25519-dalek 2023-06-27 04:00:12 +00:00
montgomery.rs curve: Add arbitrary integer multiplication with MontgomeryPoint::mul_bits_be (#555) 2023-08-28 01:58:41 -04:00
ristretto.rs Address new nightly clippy unnecessary qualifications (#639) 2024-03-07 16:58:20 -07:00
scalar.rs Aeneas-compat: index-based LE word load in non_adjacent_form 2026-07-04 11:39:12 +02:00
traits.rs Fix new nightly redundant import lint warns (#638) 2024-02-29 18:56:52 -07:00
window.rs Address new nightly clippy unnecessary qualifications (#639) 2024-03-07 16:58:20 -07:00