[][src]Module curve25519_dalek::backend::serial::u64::constants

This module contains backend-specific constant values, such as the 64-bit limbs of curve constants.

Constants

AFFINE_ODD_MULTIPLES_OF_BASEPOINT

Odd multiples of the basepoint [B, 3B, 5B, 7B, 9B, 11B, 13B, 15B, ..., 127B].

APLUS2_OVER_FOUR

APLUS2_OVER_FOUR is (A+2)/4. (This is used internally within the Montgomery ladder.)

ED25519_BASEPOINT_POINT

The Ed25519 basepoint, as an EdwardsPoint.

ED25519_BASEPOINT_TABLE

Table containing precomputed multiples of the Ed25519 basepoint \(B = (x, 4/5)\).

ED25519_BASEPOINT_TABLE_INNER_DOC_HIDDEN

Inner constant, used to avoid filling the docs with precomputed points.

EDWARDS_D

Edwards d value, equal to -121665/121666 mod p.

EDWARDS_D2

Edwards 2*d value, equal to 2*(-121665/121666) mod p.

EDWARDS_D_MINUS_ONE_SQUARED

Edwards d value minus one squared, equal to (((-121665/121666) mod p) - 1) pow 2

EIGHT_TORSION

The 8-torsion subgroup \(\mathcal E [8]\).

EIGHT_TORSION_INNER_DOC_HIDDEN

Inner item used to hide limb constants from cargo doc output.

INVSQRT_A_MINUS_D

= 1/sqrt(a-d), where a = -1 (mod p), d are the Edwards curve parameters.

L

L is the order of base point, i.e. 2^252 + 27742317777372353535851937790883648493

LFACTOR

L * LFACTOR = -1 (mod 2^52)

MINUS_ONE

The value of minus one, equal to -&FieldElement::one()

ONE_MINUS_EDWARDS_D_SQUARED

One minus edwards d value squared, equal to (1 - (-121665/121666) mod p) pow 2

R

R = R % L where R = 2^260

RR

RR = (R^2) % L where R = 2^260

SQRT_AD_MINUS_ONE

= sqrt(a*d - 1), where a = -1 (mod p), d are the Edwards curve parameters.

SQRT_M1

Precomputed value of one of the square roots of -1 (mod p)