mirror of
https://github.com/luxfi/kms.git
synced 2026-10-30 16:23:36 +00:00
zeekay
cc986c328d
Squashes all pre-rewrite history into a single root commit. Previous tree: - 14506 commits including upstream Infisical fork history - Multiple merge chains carrying pre-purge content Force-rewrite per disk-space reclamation discipline. GHCR images (1.9.9, 1.9.11) remain immutable; their git lineage is no longer materialized.
73 lines
3.7 KiB
Go
73 lines
3.7 KiB
Go
// Package bls12381 provides bilinear pairings using the BLS12-381 curve.
|
|
//
|
|
// A pairing system consists of three groups G1 and G2 (additive notation) and
|
|
// Gt (multiplicative notation) of the same order.
|
|
// Scalars can be used interchangeably between groups.
|
|
//
|
|
// These groups have the same order equal to:
|
|
//
|
|
// Order = 0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001
|
|
//
|
|
// # Serialization Format
|
|
//
|
|
// Elements of G1 and G2 can be encoded in uncompressed form (the x-coordinate
|
|
// followed by the y-coordinate) or in compressed form (just the x-coordinate).
|
|
// G1 elements occupy 96 bytes in uncompressed form, and 48 bytes in compressed
|
|
// form. G2 elements occupy 192 bytes in uncompressed form, and 96 bytes in
|
|
// compressed form.
|
|
//
|
|
// The most-significant three bits of a G1 or G2 encoding should be masked away
|
|
// before the coordinates are interpreted. These bits are used to unambiguously
|
|
// represent the underlying element:
|
|
//
|
|
// * The most significant bit, when set, indicates that the point is in
|
|
// compressed form. Otherwise, the point is in uncompressed form.
|
|
//
|
|
// * The second-most significant bit indicates that the point is at infinity.
|
|
// If this bit is set, the remaining bits of the group element's encoding
|
|
// should be set to zero.
|
|
//
|
|
// * The third-most significant bit is set if (and only if) this point is in
|
|
// compressed form AND it is not the point at infinity AND its y-coordinate
|
|
// is the lexicographically largest of the two associated with the encoded
|
|
// x-coordinate.
|
|
//
|
|
// |------------------------------------------------------|
|
|
// | Serialization Format |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | MSB | MSB-1 | MSB-2 | Description | Encoding |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Non-compressed, | |
|
|
// | 0 | 0 | 0 | Non-Infinity, | e || x || y |
|
|
// | | | | Zero. | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Non-compressed, | |
|
|
// | 0 | 0 | 1 | Non-Infinity, | Invalid |
|
|
// | | | | One. | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Non-compressed, | |
|
|
// | 0 | 1 | 0 | Infinity, | e || 0 || 0 |
|
|
// | | | | Zero. | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Non-compressed, | |
|
|
// | 0 | 1 | 1 | Infinity, | Invalid |
|
|
// | | | | One. | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Compressed, | |
|
|
// | 1 | 0 | 0 | Non-Infinity, | e || x |
|
|
// | | | | Small y-coord | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Compressed, | |
|
|
// | 1 | 0 | 1 | Non-Infinity, | e || x |
|
|
// | | | | Big y-coord | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Compressed, | |
|
|
// | 1 | 1 | 0 | Infinity, | e || 0 |
|
|
// | | | | Zero. | |
|
|
// |-----|-------|-------|-----------------|--------------|
|
|
// | | | | Compressed, | |
|
|
// | 1 | 1 | 1 | Infinity, | Invalid |
|
|
// | | | | One. | |
|
|
// |------------------------------------------------------|
|
|
package bls12381
|