mirror of
https://github.com/logos-storage/constantine.git
synced 2026-01-02 13:13:07 +00:00
f5c0b6245d
* Productionize multipairings for BLS12-381 * typo * arg order + benchmark * Introduce mul_3way_sparse_sparse * cleanup MultiMiller loop * fix init sparse optimization in multimiller loop [skip ci]
75 lines
2.3 KiB
Nim
75 lines
2.3 KiB
Nim
# Constantine
|
||
# Copyright (c) 2018-2019 Status Research & Development GmbH
|
||
# Copyright (c) 2020-Present Mamy André-Ratsimbazafy
|
||
# Licensed and distributed under either of
|
||
# * MIT license (license terms in the root directory or at http://opensource.org/licenses/MIT).
|
||
# * Apache v2 license (license terms in the root directory or at http://www.apache.org/licenses/LICENSE-2.0).
|
||
# at your option. This file may not be copied, modified, or distributed except according to those terms.
|
||
|
||
import
|
||
std/typetraits,
|
||
../primitives,
|
||
../arithmetic,
|
||
../towers,
|
||
../elliptic/ec_shortweierstrass_affine,
|
||
../io/io_towers
|
||
|
||
# No exceptions allowed
|
||
{.push raises: [].}
|
||
|
||
type
|
||
Line*[F] = object
|
||
## Packed line representation over a E'(Fp^k/d)
|
||
## with k the embedding degree and d the twist degree
|
||
## i.e. for a curve with embedding degree 12 and sextic twist
|
||
## F is Fp2
|
||
##
|
||
## Assuming a Sextic Twist
|
||
##
|
||
## Out of 6 Fp2 coordinates, 3 are 0 and
|
||
## the non-zero coordinates depend on the twist kind.
|
||
##
|
||
## For a D-twist,
|
||
## (x, y, z) corresponds to an sparse element of Fp12
|
||
## with Fp2 coordinates: xy00z0
|
||
## For a M-Twist
|
||
## (x, y, z) corresponds to an sparse element of Fp12
|
||
## with Fp2 coordinates: xyz000
|
||
x*, y*, z*: F
|
||
|
||
SexticNonResidue* = NonResidue
|
||
## The Sextic non-residue to build
|
||
## 𝔽p2 -> 𝔽p12 towering and the G2 sextic twist
|
||
## or
|
||
## 𝔽p -> 𝔽p6 towering and the G2 sextic twist
|
||
##
|
||
## Note:
|
||
## while the non-residues for
|
||
## - 𝔽p2 -> 𝔽p4
|
||
## - 𝔽p2 -> 𝔽p6
|
||
## are also sextic non-residues by construction.
|
||
## the non-residues for
|
||
## - 𝔽p4 -> 𝔽p12
|
||
## - 𝔽p6 -> 𝔽p12
|
||
## are not.
|
||
|
||
func toHex*(line: Line, order: static Endianness = bigEndian): string =
|
||
result = static($line.typeof.genericHead() & '(')
|
||
for fieldName, fieldValue in fieldPairs(line):
|
||
when fieldName != "x":
|
||
result.add ", "
|
||
result.add fieldName & ": "
|
||
result.appendHex(fieldValue, order)
|
||
result.add ")"
|
||
|
||
# Line evaluation
|
||
# --------------------------------------------------
|
||
|
||
func line_update*[F1, F2](line: var Line[F2], P: ECP_ShortW_Aff[F1, NotOnTwist]) =
|
||
## Update the line evaluation with P
|
||
## after addition or doubling
|
||
## P in G1
|
||
static: doAssert F1.C == F2.C
|
||
line.x *= P.y
|
||
line.z *= P.x
|