zig

commit fb63a2cfaecb981010e0b9d656fd372dbb331888 (tree)
parent dd4771a5d2815004a75a90895fe45addb3a015d1
Author: Frank Denis <github@pureftpd.org>
Date:   Tue,  6 Oct 2020 14:02:06 +0200

std/crypto: faster (mod 2^255-19) square root computation

251 squarings, 250 multiplications -> 251 squarings, 11 multiplications

Diffstat:
M
lib/std/crypto/25519/field.zig
 | 
14
++++++++------

1 file changed, 8 insertions(+), 6 deletions(-)
diff --git a/lib/std/crypto/25519/field.zig b/lib/std/crypto/25519/field.zig
@@ -307,12 +307,14 @@ pub const Fe = struct {
     }
 
     pub fn pow2523(a: Fe) Fe {
-        var c = a;
-        var i: usize = 0;
-        while (i < 249) : (i += 1) {
-            c = c.sq().mul(a);
-        }
-        return c.sq().sq().mul(a);
+        var t0 = a.mul(a.sq());
+        var t1 = t0.mul(t0.sqn(2)).sq().mul(a);
+        t0 = t1.sqn(5).mul(t1);
+        var t2 = t0.sqn(5).mul(t1);
+        t1 = t2.sqn(15).mul(t2);
+        t2 = t1.sqn(30).mul(t1);
+        t1 = t2.sqn(60).mul(t2);
+        return t1.sqn(120).mul(t1).sqn(10).mul(t0).sqn(2).mul(a);
     }
 
     pub fn abs(a: Fe) Fe {