zec
/
pasta
mirror of https://github.com/zcash/pasta.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

More efficient cycle. 

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2019-09-15 17:24:38 +01:00
parent 44e352fa35
commit a0aa049803
7 changed files with 11 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Ep/l
View File

@ -1 +1 @@
57896044618658097711785492504343953925989756877607147991657089165100807356417
28948022309329048855892746252171976963328925580104350145334818258365412540417

2
Ep/p
View File

@ -1 +1 @@
57896044618658097711785492504343953925989756877607163761872965584918954377217
28948022309329048855892746252171976963328925580104355652489057042149991776257

2
Ep/rigid
View File

@ -1 +1 @@
not rigid
somewhat rigid

2
Eq/l
View File

@ -1 +1 @@
57896044618658097711785492504343953925989756877607163761872965584918954377217
28948022309329048855892746252171976963328925580104355652489057042149991776257

2
Eq/p
View File

@ -1 +1 @@
57896044618658097711785492504343953925989756877607147991657089165100807356417
28948022309329048855892746252171976963328925580104350145334818258365412540417

2
Eq/rigid
View File

@ -1 +1 @@
not rigid
somewhat rigid

12
README.md
View File

@ -9,8 +9,8 @@ prime-order curves:
with
* p = 57896044618658097711785492504343953925989756877607163761872965584918954377217
* q = 57896044618658097711785492504343953925989756877607147991657089165100807356417
* p = 2^254 + 11429413694214642624661040171709366273
* q = 2^254 + 11429413694209135470422256387130130433
satisfy *some* of the [SafeCurves criteria](https://safecurves.cr.yp.to/index.html).
@ -23,12 +23,10 @@ The criteria that are *not* satisfied are, in summary:
* ladder support (not possible for prime-order curves);
* Elligator 2 support (indistinguishability is possible using
[Elligator Squared](https://ifca.ai/pub/fc14/paper_25.pdf), but not using Elligator 2);
* twist security;
* rigidity.
* twist security.
(Provisional) Tweedledum/Tweedledee is one of the cycles output by
``sage amicable.sage --nearpowerof2 255 32`` (the first one with constant 5 for both curves
and gcd(p-1, 5) = 1, gcd(q-1, 5) = 1).
(Provisional) Tweedledum/Tweedledee is the first cycle output by
``sage amicable.sage --nearpowerof2 255 30``.
**Which cycle we call Tweedledum/Tweedledee is subject to change as we make further
optimizations to Halo.**