On 2/7/2015 4:45 PM, Michael Hamburg wrote:
On Feb 7, 2015, at 4:30 PM, Brian Warner <war...@lothar.com> wrote:
On 2/7/15 2:21 PM, Michael Hamburg wrote:
*Shameless plug*:
If you’d like, I can get Decaf up and running on TwistEd25519 in
Python. Decaf divides the cofactor by 4, and also conveniently
implements a hash to the curve.
That'd be fun :).
OK, I’ll see what I can do.
Actually this will take a while. I'm pretty busy this week, but I was
going to just cut and paste the code with different constants. I forgot
something though: the twist of Curve25519 is a *twisted* Montgomery
curve, and over a 1-mod-4 field that's actually a different thing (I
think? Other EC folks please correct me if I'm wrong). The strategy
still works but a bunch of the formulas need adjustment.
Cheers,
-- Mike
_______________________________________________
Curves mailing list
Curves@moderncrypto.org
https://moderncrypto.org/mailman/listinfo/curves
