librustzcash/jubjub/doc/evidence
Sean Bowe 281cfe1912 Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
..
.gitignore Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
LICENSE Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
README.md Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
a Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
d Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
l Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
p Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
rigid Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
run.sh Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
shape Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
verify.sage Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
x0 Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
x1 Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
y0 Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00
y1 Merge commit 'd029ddea8396d7a39910028dd5ae436a3bd3e9bb' as 'jubjub' 2019-12-12 11:32:47 -07:00

README.md

Jubjub supporting evidence

This repository contains supporting evidence that the twisted Edwards curve -x^2 + y^2 = 1 - (10240/10241).x^2.y^2 of rational points over GF(52435875175126190479447740508185965837690552500527637822603658699938581184513), also called "Jubjub", satisfies the SafeCurves criteria.

The script verify.sage is based on this script from the SafeCurves site, modified

  • to support twisted Edwards curves;
  • to generate a file 'primes' containing the primes needed for primality proofs, if it is not already present;
  • to change the directory in which Pocklington proof files are generated (proof/ rather than ../../../proof), and to create that directory if it does not exist.

Prerequisites:

  • apt-get install sagemath
  • pip install sortedcontainers

Run sage verify.sage ., or ./run.sh to also print out the results.

Note that the "rigidity" criterion cannot be checked automatically.