FiloSottile / FiloSottile/edwards25519

Add Point method to check prime order subgroup inclusion

Open
#33 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
188
Forks
39
PR merge metrics
No merged PRs in 30d

Description

Naively, we can do this by multiplying by l and checking if we get the infinity.

That multiplication can be precomputed as an addition chain generated with addchain.

Eventually, we should use Pronin's technique described in https://eprint.iacr.org/2022/1164.pdf.

Contributor guide

Open the contributing guide

Research direction

No file or test is named. Start by locating the Point API and the subgroup order l, then review the proposed multiplication approach, addchain, and Pronin's technique in the linked paper. Done means the Point method's subgroup-inclusion behavior and implementation approach are agreed and covered by appropriate tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cryptography
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.