-
Notifications
You must be signed in to change notification settings - Fork 152
/
twistededwards.go
64 lines (48 loc) · 1.72 KB
/
twistededwards.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
/*
Copyright © 2020 ConsenSys
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package twistededwards
import (
"math/big"
"github.com/consensys/gnark-crypto/ecc/bls12-377/fr"
)
// CurveParams curve parameters: ax^2 + y^2 = 1 + d*x^2*y^2
type CurveParams struct {
A, D fr.Element // in Montgomery form
Cofactor fr.Element // not in Montgomery form
Order big.Int
Base PointAffine
}
var edwards CurveParams
// GetEdwardsCurve returns the twisted Edwards curve on BLS12-377's Fr
func GetEdwardsCurve() CurveParams {
// copy to keep Order private
var res CurveParams
res.A.Set(&edwards.A)
res.D.Set(&edwards.D)
res.Cofactor.Set(&edwards.Cofactor)
res.Order.Set(&edwards.Order)
res.Base.Set(&edwards.Base)
return res
}
func init() {
edwards.A.SetOne().Neg(&edwards.A)
edwards.D.SetUint64(3021)
edwards.Cofactor.SetUint64(4).FromMont()
edwards.Order.SetString("2111115437357092606062206234695386632838870926408408195193685246394721360383", 10)
edwards.Base.X.SetString("717051916204163000937139483451426116831771857428389560441264442629694842243")
edwards.Base.Y.SetString("882565546457454111605105352482086902132191855952243170543452705048019814192")
}
// mulByA multiplies fr.Element by edwards.A
func mulByA(x *fr.Element) {
x.Neg(x)
}