-
I am trying to use libsodium to realize a three-round sigma protocol. There is one part need calculation of g^r*(g^e)^w=g^(r+ew). However, I cannot get the equation that (g^e)^w=g^(e*w). I am afraid that it is due to the scalar multiplication and the mod L in the function. Can anyone help me with this? Thank you. The below gew and gwe should be the same but in fact they are different.
|
Beta Was this translation helpful? Give feedback.
Answered by
jedisct1
Jul 5, 2021
Replies: 1 comment
-
crypto_scalarmult_ed25519_base_noclamp(ge, e); // g^e
crypto_core_ed25519_scalar_mul(ew, e, w); // ew
crypto_scalarmult_ed25519_base_noclamp(g_ew, ew); // g^ew
crypto_scalarmult_ed25519_noclamp(ge_w, w, ge); // ge^w → |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
jedisct1
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
→
g_ew
≡ge_w