Tim Ruffing 1253a27756

Merge bitcoin-core/secp256k1#1033: Add _fe_half and use in _gej_add_ge and _gej_double ...

e848c3799c4f31367c3ed98d17e3b7de504d4c6e Update sage files for new formulae (Peter Dettman)
d64bb5d4f3fbd48b570d847c9389b9cf8f3d9abc Add fe_half tests for worst-case inputs (Peter Dettman)
4eb8b932ff8e64f8de3ae8ecfebeab1e84ca420e Further improve doubling formula using fe_half (Peter Dettman)
557b31fac36529948709d4bfcc00ad3acb7e83b9 Doubling formula using fe_half (Pieter Wuille)
2cbb4b1a424d9dee12a4e11f0479410b7e4cc930 Run more iterations of run_field_misc (Pieter Wuille)
9cc5c257eddc2d7614985be60bee29cf2bec65fb Add test for secp256k1_fe_half (Pieter Wuille)
925f78d55e112cd00f1e2867886bdc751a5d6606 Add _fe_half and use in _gej_add_ge (Peter Dettman)

Pull request description:

  - Trades 1 _half for 3 _mul_int and 2 _normalize_weak

  Gives around 2-3% faster signing and ECDH, depending on compiler/platform.

ACKs for top commit:
  sipa:
    utACK e848c3799c4f31367c3ed98d17e3b7de504d4c6e
  jonasnick:
    ACK e848c3799c4f31367c3ed98d17e3b7de504d4c6e
  real-or-random:
    ACK e848c3799c4f31367c3ed98d17e3b7de504d4c6e

Tree-SHA512: 81a6c93b3d983f1b48ec8e8b6f262ba914215045a95415147f41ee6e85296aa4d0cbbad9f370cdf475571447baad861d2cc8e0b04a71202d48959cb8a098f584

2022-02-21 11:00:08 +01:00

..

gen_exhaustive_groups.sage

sage: Reorganize files

2020-11-25 13:50:40 +01:00

gen_split_lambda_constants.sage

sage: Add script for generating scalar_split_lambda constants

2020-12-03 11:56:09 +01:00

group_prover.sage

sage: Ensure that constraints are always fastfracs

2022-02-04 15:39:44 +01:00

prove_group_implementations.sage

Merge bitcoin-core/secp256k1#1033: Add _fe_half and use in _gej_add_ge and _gej_double

2022-02-21 11:00:08 +01:00

secp256k1_params.sage

Fix G.y parity in sage code

2021-10-20 10:14:13 -04:00

weierstrass_prover.sage

sage: Ensure that constraints are always fastfracs

2022-02-04 15:39:44 +01:00