]> git.codecow.com Git - Monocypher.git/commit
projects / Monocypher.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b96ca7c) | patch
Avoids the first few doublings in EdDSA verification
authorLoup Vaillant <loup@loup-vaillant.fr>
Sat, 4 Aug 2018 19:37:14 +0000 (21:37 +0200)
committerLoup Vaillant <loup@loup-vaillant.fr>
Sat, 4 Aug 2018 19:37:14 +0000 (21:37 +0200)
commit3e6dc5fd9fef4a789ff60cc59428421dd101617a
tree760cbdd99fc10da54849765af04b0ba58edda3ebtree | snapshot
parentb96ca7c830dd110a489619561fdc271af2d8ae63commit | diff
Avoids the first few doublings in EdDSA verification

Legitimate scalars with EdDSA verification are at most 253-bit long.
That's 3 bits less than the full 256 bits.  By starting the loop at the
highest bit set, we can save a couple doublings.  It's not much, but
it's measurable.
src/monocypher.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.