b1ef2682d6
Modular exponentiation (arbitrary output) and EIP-198 ( #242 )
...
* implement arbitrary precision modular exponentiation (prerequisite EIP-198)
* [modexp] implement exponentiation modulo 2ᵏ
* add inversion (mod 2ᵏ)
* [modexp] High-level wrapper for powmod with odd modulus
* [modexp] faster exponentiation (mod 2ᵏ) for even case and Euler's totient function odd case
* [modexp] implement general fast modular exponentiation
* Fix modular reduction with 64-bit modulus + fuzz powmod vs GMP
* add benchmark
* add EIP-198 support
* fixups following self review
* fix test paths
2023-06-01 23:38:41 +02:00
33c3a2e8c4
[Research] x86 code generator ( #234 )
...
* rename compilers -> intrinsics, math_gpu -> math_codegen
* stash x86 codegen in research
2023-04-27 21:52:51 +02:00
95114bf707
move research sanity check to research/ [skip ci]
2023-01-30 20:57:12 +01:00
ff8c26c1fe
BLS Aggregate and Batch verify ( #214 )
...
* pairing -> pairings, and use alloca arrays instead of static arrays
* aggregate and batched BLS signature
* DLL generation broken by path changes
2023-01-27 00:42:12 +01:00
d4e202ead5
Don't use array[^1], it can throw and cannot be locally turn off
2022-09-17 18:52:52 +02:00
7d29cb947a
Prepare for bindings generation
2022-07-16 13:34:27 +02:00
ffacf61e8a
Don't dump all in "backend" ( #184 )
...
* backend -> math
* towers -> extension fields
* move ISA and compiler specific code out of math/
* fix export
2022-02-27 01:49:08 +01:00
fe500a6a79
Productionize: move protocols top-level vs backend ( #179 )
...
* Productionize: move protocols top-level vs backend
* fix path
* import fix
* the last one
* benches as well
2022-02-21 01:04:53 +01:00
dc73c71801
Pairings optimizations ( #178 )
...
* bench for cyclotomic square, exp and rename cyclotomic exp + multipairings for BLS12-377
* refactor/unify lines and cyclotomic functions
* Add Karabina's compressed squaring
* Use compressed squarings in final exponentiation
* Weighted addchain for bn254_snarks
* Add new towering options and cost functions
* Rearrange bench summaries
* fix BW6-761
2022-02-20 20:15:20 +01:00
53c4db7ead
Fast modular inversion ( #172 )
...
* split modular inversion in its own file
* Stash fast GCD inversion https://eprint.iacr.org/2020/972.pdf
* Stash Pornin's bingcd -> issue with inner modular reduction
* Implement Bernstein-Yang inversion
* Avoid Nim checks on signed integers (32-bit runtime issue)
* cleanup: remove old inversion impls
* cleanup: static moduli, move div2
* small comments (skip ci)
* comment cleanup (skip ci)
* fix total iterations on 32-bit
* Add batch conversion to affine coordinates using simultaneous inversion trick
* fix conditional setZero and batchAffine conversion
* cleanup unneeded branches following affine conversion unification
* Fix batchAffine with zero inputs and add fuzz failure to test suite
2022-02-10 14:05:07 +01:00
c02e6bdf84
Tag vartime the bithacks that are not constant-time
2022-02-06 18:36:02 +01:00
50717d8de6
Test GT-subgroup for BW6-761 ( #171 )
2022-01-08 17:30:26 +01:00
f6c02fe075
Optimized subgroup checks and cofactor clearing ( #169 )
...
* Move cofactor clearing to dedicated per-curve subgroups file
* Add BLS12-381 fast subgroup checks
* Implement fast cofactor clearing for BN254_snarks
* Add fast subgroup check to BN254Snarks
* add BLS12_377 optimized cofactor and subgroup functions
* Add BN254_Nogami
* Add GT-subgroup tests
* Use the new subgroup checks for Eth1 EVM precompiles
2022-01-03 14:12:58 +01:00
c42e2a0251
Rename NotOnTwist/OnTwist => subgroup G1 and G2
2022-01-01 19:17:04 +01:00
f5c0b6245d
Multipairing ( #165 )
...
* Productionize multipairings for BLS12-381
* typo
* arg order + benchmark
* Introduce mul_3way_sparse_sparse
* cleanup MultiMiller loop
* fix init sparse optimization in multimiller loop [skip ci]
2021-08-16 22:22:51 +02:00
976edb64bb
Move pairing_bw6_761 to staging area
2021-02-14 18:35:20 +01:00
e9a1ef91fb
[Research] KZG polynomial commit and verify
2021-02-14 17:59:52 +01:00
2242650d38
move the multipairing file to research [skip ci]
2021-02-14 17:18:42 +01:00
799b6530f8
[research] Polynomial evaluation and verification [skip ci]
2021-02-14 17:14:33 +01:00
54887b1777
[Research] KZG polynomial commitment - part 1 FFT ( #151 )
...
* FFT compiles, now on to debugging ... [skip CI]
* Fix FFT and add bench [skip ci]
* rename + add KZG resources
* rename fft_fr
* Implement FFT on elliptic curves =)
* FFT G1 bench
2021-02-06 22:11:17 +01:00
Mamy Ratsimbazafy