ni...@lysator.liu.se (Niels Möller) writes: > E.g., ecc_point_mul takes a const struct ecc_point as input, and calls > ecc->mul, which for the standard weierstrass curves is ecc_mul_a. This > one is a loop including a call to ecc_add_jja, which assumes that the z > coordinate is one.
Sorry, looked at the wrong implementation of ecc_mul_a. ecc_add_jja is used in the *main loop* only if ECC_MUL_A_WBITS == 0 However, when ECC_MUL_A_WBITS > 0 (currently set to 4), ecc_add_jja is still used in the table_init function. So being able to require that z == 1 is still beneficial. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid 368C6677. Internet email is subject to wholesale government surveillance. _______________________________________________ nettle-bugs mailing list nettle-bugs@lists.lysator.liu.se http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
