forked from forks/go-ethereum
5606cbc710
Updates the libsecp256k1 dependency to commit: c0d9480fbbf8eccbd4be23ed27f6f2af6f3b211e PR: ``` BenchmarkSign-24 57756 21214 ns/op 164 B/op 3 allocs/op BenchmarkRecover-24 37156 33044 ns/op 80 B/op 1 allocs/op BenchmarkEcrecoverSignature-24 36889 32935 ns/op 80 B/op 1 allocs/op BenchmarkVerifySignature-24 41163 29207 ns/op 0 B/op 0 allocs/op BenchmarkDecompressPubkey-24 318624 4062 ns/op 304 B/op 6 allocs/op ``` Master: ``` BenchmarkSign-24 34509 35330 ns/op 164 B/op 3 allocs/op BenchmarkRecover-24 25418 47725 ns/op 80 B/op 1 allocs/op BenchmarkEcrecoverSignature-24 25735 47591 ns/op 80 B/op 1 allocs/op BenchmarkVerifySignature-24 29108 41097 ns/op 0 B/op 0 allocs/op BenchmarkDecompressPubkey-24 294747 4143 ns/op 304 B/op 6 allocs/op ``` Performance seems to be improved significantly: ``` Sign-24 34.86µ ± 3% 21.66µ ± 2% -37.86% (p=0.000 n=10) Recover-24 46.14µ ± 3% 33.24µ ± 2% -27.95% (p=0.000 n=10) ```
39 lines
1,023 B
Python
39 lines
1,023 B
Python
"""Prime order of finite field underlying secp256k1 (2^256 - 2^32 - 977)"""
|
|
P = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F
|
|
|
|
"""Finite field underlying secp256k1"""
|
|
F = FiniteField(P)
|
|
|
|
"""Elliptic curve secp256k1: y^2 = x^3 + 7"""
|
|
C = EllipticCurve([F(0), F(7)])
|
|
|
|
"""Base point of secp256k1"""
|
|
G = C.lift_x(0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798)
|
|
if int(G[1]) & 1:
|
|
# G.y is even
|
|
G = -G
|
|
|
|
"""Prime order of secp256k1"""
|
|
N = C.order()
|
|
|
|
"""Finite field of scalars of secp256k1"""
|
|
Z = FiniteField(N)
|
|
|
|
""" Beta value of secp256k1 non-trivial endomorphism: lambda * (x, y) = (beta * x, y)"""
|
|
BETA = F(2)^((P-1)/3)
|
|
|
|
""" Lambda value of secp256k1 non-trivial endomorphism: lambda * (x, y) = (beta * x, y)"""
|
|
LAMBDA = Z(3)^((N-1)/3)
|
|
|
|
assert is_prime(P)
|
|
assert is_prime(N)
|
|
|
|
assert BETA != F(1)
|
|
assert BETA^3 == F(1)
|
|
assert BETA^2 + BETA + 1 == 0
|
|
|
|
assert LAMBDA != Z(1)
|
|
assert LAMBDA^3 == Z(1)
|
|
assert LAMBDA^2 + LAMBDA + 1 == 0
|
|
|
|
assert Integer(LAMBDA)*G == C(BETA*G[0], G[1])
|