secp256k1/doc
Pieter Wuille 277b224b6a Use modified divsteps with initial delta=1/2 for constant-time
Instead of using eta=-delta, use zeta=-(delta+1/2) to represent
delta. This variant only needs at most 590 iterations for 256-bit
inputs rather than 724 (by convex hull bounds analysis).
2021-04-13 11:59:11 -07:00
..
safegcd_implementation.md Use modified divsteps with initial delta=1/2 for constant-time 2021-04-13 11:59:11 -07:00