mirror of https://github.com/zcash/orchard.git
The magnitude of the short signed scalar must be 64 bits. We decompose the magnitude into 22 3-bit windows and check that each window is in the 3-bit range. However, since the first 21 windows have already accounted for 63 bits, the last window is constrained to be a single bit. |
||
---|---|---|
.. | ||
gadget | ||
gadget.rs |