Correct a comment.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2021-01-02 00:20:36 +00:00
parent 4a3a34feea
commit c0f2b2d8b6
1 changed files with 1 additions and 2 deletions

View File

@ -156,8 +156,7 @@ def map_to_curve_simple_swu(F, E, Z, us, c):
# This magic also comes from a generalization of [WB2019, section 4.2].
#
# The Sarkar square root algorithm with input s gives us a square root of
# h * s for free when s is not square, provided we choose h to be a generator
# of the order 2^n multiplicative subgroup (where n = 32 for Pallas and Vesta).
# h * s for free when s is not square, where h is a fixed nonsquare.
# We know that Z/h is a square since both Z and h are nonsquares.
# Precompute \theta as a square root of Z/h, or choose Z = h so that \theta = 1.
#