Bandersnatch/wagon Curve25519: fast subgroup checks
mratsim opened this issue · comments
See either:
- Pornin's: https://eprint.iacr.org/2022/1164.pdf
- Koshelev's via Tate Pairing: https://eprint.iacr.org/2022/037.pdf
mratsim / constantine
Constantine: modular, high-performance, zero-dependency cryptography stack for verifiable computation, proof systems and blockchain protocols.