k256: endomorphism-aware wNAF for vartime scalar multiplication - #1745

Merged

tarcieri merged 9 commits into

RustCrypto:masterfrom

42Pupusas:k256/schnorr-verify-perf

Jun 10, 2026

Commits on Jun 9, 2026

k256: endomorphism-aware wNAF for vartime scalar multiplication

42Pupusas
and
claude
committed
c99dd8e
k256: share doublings across s*G + e*P in Schnorr verify

42Pupusas
and
claude
committed
2e12798
k256: debug_assert wNAF digit index stays in bounds

42Pupusas
and
claude
committed
9473294
k256: fix wNAF overflow past bit 127 for near-2^128 inputs

42Pupusas
and
claude
committed
67fa19b
k256: use group crate WnafBase/WnafScalar for GLV vartime mul

42Pupusas
and
claude
committed
25b43f9
k256: adapt GLV wNAF mul to the merged upstream API

42Pupusas
and
claude
committed
a75f4be
k256: tidy GLV vartime mul structure

42Pupusas
and
claude
committed
b986ce7
k256: restore lincomb for no-alloc mul_by_generator_and_mul_add_vartime

42Pupusas
and
claude
committed
39e2ae2
k256: import wNAF types from the in-repo wnaf crate

42Pupusas
and
claude
committed
db2db3a