// We ignore v because we don't need it for X25519 (the Montgomery
// ladder only uses u).
//
-// Note that e is eiter 0, 1 or -1
+// Note that e is either 0, 1 or -1
// if e = 0 u = 0 and v = 0
// if e = 1 u = w
// if e = -1 u = -w - A = w * non_square * r^2
# with this software. If not, see
# <https://creativecommons.org/publicdomain/zero/1.0/>
-from elligator import fe
from elligator import can_curve_to_hash
from elligator import curve_to_hash
from elligator import fast_curve_to_hash
int status = 0;
int i = 0;
while (i < 64) {
- RANDOM_INPUT(sk1, 33);
+ RANDOM_INPUT(sk1, 32);
RANDOM_INPUT(sk2, 32);
u8 r[32];
if (crypto_elligator2_inverse(r, sk1, i)) {