DRS62

[ViktYusk]

Could you please give a source about the method of modular inversion you use in the project? It is DRS62 (delayed right shift 62 bits). I can't find any articles about this method on the internet.

[JeanLucPons]

Hi,
Link are in the code.
The one currently used in the Thomas Pornin's method (used with 62 bits instead of 31 in his implementation): https://github.com/pornin/bingcd/blob/main/doc/bingcd.pdf
You can also activate the one used in bitcoin library (implementation by Peter Dettman) all info,papers can be found there bitcoin-core/secp256k1#767.
The Thomas Pornin's method is faster, especially for variable time implementation.
JL