k256: endomorphism-aware wNAF for vartime scalar multiplication#1745

Merged

tarcieri merged 9 commits into

RustCrypto:masterfrom

42Pupusas:k256/schnorr-verify-perf

Jun 10, 2026

Commits on Jun 9, 2026

k256: endomorphism-aware wNAF for vartime scalar multiplication

42Pupusas
and
claude
committed
k256: share doublings across s*G + e*P in Schnorr verify

42Pupusas
and
claude
committed
k256: debug_assert wNAF digit index stays in bounds

42Pupusas
and
claude
committed
k256: fix wNAF overflow past bit 127 for near-2^128 inputs

42Pupusas
and
claude
committed
k256: use group crate WnafBase/WnafScalar for GLV vartime mul

42Pupusas
and
claude
committed
k256: adapt GLV wNAF mul to the merged upstream API

42Pupusas
and
claude
committed
k256: tidy GLV vartime mul structure

42Pupusas
and
claude
committed
k256: restore lincomb for no-alloc mul_by_generator_and_mul_add_vartime

42Pupusas
and
claude
committed
k256: import wNAF types from the in-repo wnaf crate

42Pupusas
and
claude
committed