4 Dec
2019
4 Dec
'19
10:04 p.m.
nisse@lysator.liu.se (Niels Möller) writes:
E.g., ecc_point_mul takes a const struct ecc_point as input, and calls ecc->mul, which for the standard weierstrass curves is ecc_mul_a. This one is a loop including a call to ecc_add_jja, which assumes that the z coordinate is one.
Sorry, looked at the wrong implementation of ecc_mul_a. ecc_add_jja is used in the *main loop* only if
ECC_MUL_A_WBITS == 0
However, when ECC_MUL_A_WBITS > 0 (currently set to 4), ecc_add_jja is still used in the table_init function.
So being able to require that z == 1 is still beneficial.
Regards, /Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid 368C6677.
Internet email is subject to wholesale government surveillance.