3 Commits

Author	SHA1	Message	Date
Pieter Wuille	277b224b6a	Use modified divsteps with initial delta=1/2 for constant-time ... Instead of using eta=-delta, use zeta=-(delta+1/2) to represent delta. This variant only needs at most 590 iterations for 256-bit inputs rather than 724 (by convex hull bounds analysis).	2021-04-13 11:59:11 -07:00
Pieter Wuille	376ca366db	Fix typo in explanation	2021-04-13 11:58:54 -07:00
Pieter Wuille	d8a92fcc4c	Add extensive comments on the safegcd algorithm and implementation ... This adds a long comment explaining the algorithm and implementation choices by building it up step by step in Python. Comments in the code are also reworked/added, with references to the long explanation.	2021-03-08 09:56:07 -08:00