Skip to content

curve!: use constant-time compressed Edwards equality testing #684

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

AaronFeickert
Copy link
Contributor

This ensures that CompressedEdwardsY equality testing is always done in constant time.

BREAKING CHANGE: This can break certain uses of match.

@AaronFeickert
Copy link
Contributor Author

See #669 for discussion and similar work on the Ristretto side.

@AaronFeickert AaronFeickert changed the title curve!: use constant-time compressed equality testing curve!: use constant-time compressed Edwards equality testing Aug 2, 2024
@AaronFeickert AaronFeickert force-pushed the compressed-ed-eq-is-ct branch from d548318 to f709468 Compare January 3, 2025 20:31
@AaronFeickert AaronFeickert force-pushed the compressed-ed-eq-is-ct branch from f709468 to 6b2a9f6 Compare January 12, 2025 05:40
@AaronFeickert AaronFeickert force-pushed the compressed-ed-eq-is-ct branch from 6b2a9f6 to 5ef8c2e Compare January 19, 2025 20:59
@AaronFeickert AaronFeickert force-pushed the compressed-ed-eq-is-ct branch from 5ef8c2e to d397991 Compare June 17, 2025 02:18
@rozbb rozbb merged commit 9e4ec01 into dalek-cryptography:main Jul 7, 2025
23 checks passed
@rozbb
Copy link
Contributor

rozbb commented Jul 7, 2025

Thank you for these!

@AaronFeickert AaronFeickert deleted the compressed-ed-eq-is-ct branch July 7, 2025 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants