p256-verifier

p256-verifier copied to clipboard

Preview for now, not to be merged until audit.

nalinbhardwaj

Clarify and mention normalization

nalinbhardwaj

Cheap inversion with 32 bytes helper value

2

Alongside with pubkey and signature transaction caller may provide an inverted value then we can check the inversion `(a * a_inv == 1) mod n`. So that modexp call can...

kilic

Using IR==true in toml crushes FCL performances, leading to incorrect bench. Provide benchmarks in line with on chain performances: https://goerli.basescan.org/address/0xe9399d1183a5cf9e14b120875a616b6e2bcb840a

rdubois-crypto

couldn't find any online ATM, worst case we could automate selenium or something to generate a large amount ourselves.

nalinbhardwaj

Optimization idea: using scaling instead of doubling in Strauss-Shamir

1

Instead of doubling at each index of the loop, for the bits that are 0 in both u and v we can skip over them while incrementing some counter. When...

nalinbhardwaj

Add differential fuzzing test against a native/widely used implementation

1

> you could differentially fuzz the code vs native code w/ ffi https://book.getfoundry.sh/forge/differential-ffi-testing Seems worth adding fuzzing against popular implementations like noble/subtlecrypto in future. from @gakonst

nalinbhardwaj

requires pulling an implementation of sha3 in `generate.ts` script

nalinbhardwaj