On Fri, Mar 28, 2025 at 10:21:43AM +0900, NIIBE Yutaka via Gcrypt-devel wrote: > While, arbitrary integers can be represented in the MPI representation, > for a specific curve, the finite field is the one of integers module P > (P: a prime defined by the curve). Thus, for an ECC point, we can keep > the integer value in the range from 0 to P-1. For an intermediate value > of integer (like multiplication), 2*P is enough size.
Do you mean P^2, not 2*P, as the bound of the intermediate result of a multiplication? _______________________________________________ Gcrypt-devel mailing list Gcrypt-devel@gnupg.org https://lists.gnupg.org/mailman/listinfo/gcrypt-devel