authorgravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2026-09-28 08:01:16+02:00
committergravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2026-10-01 12:06:49+02:00
loga14e2cda6388e4b3eb2098d01208636b0a1165da
treec0884de18e6e739143e9fffe5a867e130bca34b6
parent4e38cc560315a8f5813fbd976a930601fc7f463b

Fix typo by the way: Endormorphism -> Endomorphism

2 files changed, 4 insertions(+), 4 deletions(-)

lib/std/crypto/pcurves/secp256k1.zig+3-3
......@@ -35,7 +35,7 @@ pub const Secp256k1 = struct {
3535
3636 pub const B = Fe.fromInt(7) catch unreachable;
3737
38 pub const Endormorphism = struct {
38 pub const Endomorphism = struct {
3939 const lambda = scalarFromInt(37718080363155996902926221483475020450927657555482586988616620542887997980018);
4040 const beta = Fe.fromInt(55594575648329892869085402983802832744385952214688224221778511981742606582254) catch unreachable;
4141 const b1_neg = scalarFromInt(303414439467246543595250775667605759171);
......@@ -359,11 +359,11 @@ pub const Secp256k1 = struct {
359359 pcs[2 * i] = if (point.is_base) basePointPc[0..9].* else precompute(point, 8);
360360 // lambda*P
361361 for (&pcs[2 * i + 1], pcs[2 * i]) |*pc_lambda, pc| {
362 pc_lambda.* = .{ .x = pc.x.mul(Endormorphism.beta), .y = pc.y, .z = pc.z };
362 pc_lambda.* = .{ .x = pc.x.mul(Endomorphism.beta), .y = pc.y, .z = pc.z };
363363 }
364364 var s48: [48]u8 = undefined;
365365 mem.writeInt(u384, &s48, mem.readInt(u256, &k, endian), .little);
366 const split = Endormorphism.splitScalar(scalar.reduce48(s48, .little), .little) catch unreachable;
366 const split = Endomorphism.splitScalar(scalar.reduce48(s48, .little), .little) catch unreachable;
367367
368368 for ([_][32]u8{ split.r1, split.r2 }, es[2 * i ..][0..2]) |r, *e| {
369369 const x = mem.readInt(u256, &r, .little);
lib/std/crypto/pcurves/tests/secp256k1.zig+1-1
......@@ -164,7 +164,7 @@ test "secp256k1 scalar split" {
164164 var lambda_s: [32]u8 = undefined;
165165 std.mem.writeInt(u256, &lambda_s, lambda, endian);
166166 const k = Secp256k1.scalar.random(io, endian);
167 const split = try Secp256k1.Endormorphism.splitScalar(k, endian);
167 const split = try Secp256k1.Endomorphism.splitScalar(k, endian);
168168 try testing.expectEqual(k, try Secp256k1.scalar.mulAdd(split.r2, lambda_s, split.r1, endian));
169169 for ([_][32]u8{ split.r1, split.r2 }) |r_s| {
170170 const r = std.mem.readInt(u256, &r_s, endian);