Comments (10)
Looks like it, even though it's just one field multiplication. :)
from relic.
Also, what about using y = g(x)^{(p+1)/4} instead of taking the square root for BLS12-381? Which approach is better?
from relic.
That's exactly what square root computes in case of the BLS12 prime (or any prime = 3 mod 4). :)
For faster hashing, there should be an update in a few weeks implementing https://eprint.iacr.org/2022/759, so stay tuned!
from relic.
I know that they're equivalent, I'm just wondering which one is more expensive to calculate. Thank you for the article, I'll have a look.
from relic.
Sorry if my comment was not clear. In RELIC, fp_srt()
extracts the square root exactly by computing the exponentiation.
from relic.
Thanks. Now I see. I should have look at it myself though...
from relic.
There is one more thing I don't understand. In "Fast and simple constant-time hashing to the BLS12-381 elliptic curve" the second square root is avoided by calculating y as t^3*alpha, but in your implementation you calculate two square roots. Can you explain me the reason?
from relic.
We did not have a fast squaredness test at the time, but now we have a pretty good one (upcoming paper on CCS'23 -- built upon ideas from https://eprint.iacr.org/2021/1271).
There is quite a bit of movement happening in the hashing part, including a new function and an attempt to make this one faster/constant-time: 5bd2b8b
from relic.
Sounds good. I'll have a look at it. Thank you for clarifying.
from relic.
I just merged a large patch with many new hash-to-curve algorithms for the various cases. Some polish is still pending for automatic selection, but the basics are there.
from relic.
Related Issues (20)
- RISCV64 Support HOT 1
- How to convert a fp12_t value into bn_t HOT 6
- Error thrown in Optimal Ate Pairing HOT 2
- bench_rand.c not compiling with RAND=CALL HOT 1
- Error in the KSS-18-638 curve initialization function HOT 5
- Unable to install presets on M1 chip arm64 HOT 3
- Error in ep_param_set() HOT 8
- can not deduce the macro WSIZE on Apple M2 HOT 4
- BLS signatures with point compression HOT 2
- Want to use BN_254 curve HOT 1
- Build failure since recent commit HOT 1
- Compile failure on recent master HOT 4
- Compiling on M1 Mac HOT 1
- Compile Failue with x64-ecc-128 preset HOT 3
- cmake error the target not found HOT 2
- Homegaming HOT 1
- Leak the Secret Key of BBS Short Signature in Relic via Rowhammer HOT 4
- /demo/ers-etrs code running error HOT 3
- `bn_gcd_ext_binar` returns different Bezout coefficients HOT 2
- Problem while compiling HOT 12
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from relic.