mirror of
https://github.com/logos-storage/constantine.git
synced 2026-01-02 21:23:11 +00:00
c312210878
* naive removal of out-of-place mul by non residue
* Use {.inline.} in a consistent manner across the codebase
* Handle aliasing for quadratic multiplication
* reorg optimization
* Handle aliasing for quadratic squaring
* handle aliasing in mul_sparse_complex_by_0y
* Rework multiplication by nonresidue, assume tower and twist use same non-residue
* continue rework
* continue on non-residues
* Remove "NonResidue *" calls
* handle aliasing in Chung-Hasan SQR2
* Handla aliasing in Chung-Hasan SQR3
* Use one less temporary in Chung Hasan sqr2
* handle aliasing in cubic extensions
* merge extension tower in the same file to reduce duplicate proc and allow better inlining
* handle aliasing in cubic inversion
* drop out-of-place proc from BigInt and finite fields as well
* less copies in line_projective
* remove a copy in fp12 by lines
73 lines
2.3 KiB
Nim
73 lines
2.3 KiB
Nim
# Constantine
|
||
# Copyright (c) 2018-2019 Status Research & Development GmbH
|
||
# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
|
||
# Licensed and distributed under either of
|
||
# * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
|
||
# * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
|
||
# at your option. This file may not be copied, modified, or distributed except according to those terms.
|
||
|
||
import
|
||
std/typetraits,
|
||
../primitives,
|
||
../config/curves,
|
||
../arithmetic,
|
||
../towers,
|
||
../elliptic/ec_shortweierstrass_affine,
|
||
../io/io_towers
|
||
|
||
type
|
||
Line*[F] = object
|
||
## Packed line representation over a E'(Fp^k/d)
|
||
## with k the embedding degree and d the twist degree
|
||
## i.e. for a curve with embedding degree 12 and sextic twist
|
||
## F is Fp2
|
||
##
|
||
## Assuming a Sextic Twist
|
||
##
|
||
## Out of 6 Fp2 coordinates, 3 are 0 and
|
||
## the non-zero coordinates depend on the twist kind.
|
||
##
|
||
## For a D-twist,
|
||
## (x, y, z) corresponds to an sparse element of Fp12
|
||
## with Fp2 coordinates: xy00z0
|
||
## For a M-Twist
|
||
## (x, y, z) corresponds to an sparse element of Fp12
|
||
## with Fp2 coordinates: xyz000
|
||
x*, y*, z*: F
|
||
|
||
SexticNonResidue* = NonResidue
|
||
## The Sextic non-residue to build
|
||
## 𝔽p2 -> 𝔽p12 towering and the G2 sextic twist
|
||
## or
|
||
## 𝔽p -> 𝔽p6 towering and the G2 sextic twist
|
||
##
|
||
## Note:
|
||
## while the non-residues for
|
||
## - 𝔽p2 -> 𝔽p4
|
||
## - 𝔽p2 -> 𝔽p6
|
||
## are also sextic non-residues by construction.
|
||
## the non-residues for
|
||
## - 𝔽p4 -> 𝔽p12
|
||
## - 𝔽p6 -> 𝔽p12
|
||
## are not.
|
||
|
||
func toHex*(line: Line, order: static Endianness = bigEndian): string =
|
||
result = static($line.typeof.genericHead() & '(')
|
||
for fieldName, fieldValue in fieldPairs(line):
|
||
when fieldName != "x":
|
||
result.add ", "
|
||
result.add fieldName & ": "
|
||
result.appendHex(fieldValue, order)
|
||
result.add ")"
|
||
|
||
# Line evaluation
|
||
# --------------------------------------------------
|
||
|
||
func line_update*[F1, F2](line: var Line[F2], P: ECP_ShortW_Aff[F1, NotOnTwist]) =
|
||
## Update the line evaluation with P
|
||
## after addition or doubling
|
||
## P in G1
|
||
static: doAssert F1.C == F2.C
|
||
line.x *= P.y
|
||
line.z *= P.x
|