3 ms·
I believe that would be an extremely quick fight. The formulas you mention are 50% slower than Edwards formulas, and on top of that they don’t parallelize: http
by FiloSottile 8y ago
I believe that would be an extremely quick fight. The formulas you mention are 50% slower than Edwards formulas, and on top of that they don’t parallelize: https://medium.com/@hdevalence/accelerating-edwards-curve-arithmetic-with-parallel-formulas-ac12cf5015be https://medium.com/@hdevalence/accelerating-edwards-curve-ar... (from the same author as Ristretto).
Re (1), AFAIK the author does not consider Ristretto finished by their extremely high (IMHO) standard.
- floodyberry- 8y agoNot to volunteer, but they can be parallelized, just not in the same manner as dalek. Even with the schnorr-style signatures (to avoid scalar inversions) and the endomorphism I still think it'd be slower, the group ops are nasty.