Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Twisted Edwards MSM: setNeutral instead of zeroMem #406

Merged
merged 3 commits into from
Jun 27, 2024
Merged

Conversation

mratsim
Copy link
Owner

@mratsim mratsim commented Jun 27, 2024

There were 2 bugs leading to wrong result in Twisted Edwards MSM in #390.

  1. The equality checks should special case neutral elements or a neutral element will be considered equal.
  2. In MSM, we should initialize buckets to the neutral element not via zeroMem which lead to invalid computation for Twisted Edwards curves. This fixes MSM - optimized MSM wrong result in IPA verifier. #390. Unfortunately it doesn't seem to help for Another G2 MSM wrong result #366

@mratsim mratsim merged commit 29def11 into master Jun 27, 2024
24 checks passed
@mratsim mratsim deleted the fix-ec-zeros branch June 27, 2024 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

MSM - optimized MSM wrong result in IPA verifier.
1 participant