Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
Benoit Viguier
coq-verif-tweetnacl
Commits
c68f75bb
Commit
c68f75bb
authored
Oct 01, 2019
by
Benoit Viguier
Browse files
small typos
parent
64e9490d
Changes
2
Hide whitespace changes
Inline
Side-by-side
paper/2_preliminaries.tex
View file @
c68f75bb
...
...
@@ -181,7 +181,7 @@ sv Z(gf o,const gf a,const gf b) {
}
\end{lstlisting}
Also m
ultiplication (
\TNaCle
{
M
}
)
is
heavily exploit
ing
the redundancy
M
ultiplication
s
(
\TNaCle
{
M
}
)
also
heavily exploit the redundancy
of the representation to delay carry handling.
\begin{lstlisting}
[language=Ctweetnacl]
sv M(gf o,const gf a,const gf b)
{
...
...
paper/5_highlevel.tex
View file @
c68f75bb
...
...
@@ -78,7 +78,7 @@ Inductive ec : Type := EC p of oncurve p.
Points of an elliptic curve are equipped with a structure of an abelian group.
\begin{itemize}
\item
The negation of a point
$
P
=
(
x,y
)
$
by taking the symmetric with respect to the x axis
$
-
P
=
(
x,
-
y
)
$
.
\item
The addition of two points
$
P
$
and
$
Q
$
is defined by the negation of third intersection
\item
The addition of two points
$
P
$
and
$
Q
$
is defined by the negation of
the
third intersection
of the line passing by
$
P
$
and
$
Q
$
or tangent to
$
P
$
if
$
P
=
Q
$
.
\item
$
\Oinf
$
is the neutral element under this law: if 3 points are collinear, their sum is equal to
$
\Oinf
$
.
\end{itemize}
...
...
@@ -120,7 +120,7 @@ than the Weierstra{\ss} form. We consider the Montgomery form \cite{MontgomerySp
along with an additional formal point
$
\Oinf
$
, ``at infinity''.
\end{dfn}
Using a similar representation, we defined the parametric type
\texttt
{
mc
}
which
represent the points on a specific Montgomery curve. It is parameterized by
represent
s
the points on a specific Montgomery curve. It is parameterized by
a
\texttt
{
K : ecuFieldType
}
-- the type of fields which characteristic is not 2 or 3 --
and
\texttt
{
M : mcuType
}
-- a record that packs the curve parameters
$
a
$
and
$
b
$
along with the proofs that
$
b
\neq
0
$
and
$
a
^
2
\neq
4
$
.
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment