Add ladder implementation for inverses modulo the curve order #59

pull sipa wants to merge 2 commits into bitcoin-core:master from sipa:geinverse changing 4 files +200 −5

sipa commented at 3:37 PM on September 7, 2014: contributor

This slows down the benchmark (no endomorphism, GMP bignum, 64bit_asm field) by 37%, but removes the need for a secp256k1_num_mod_inverse function.

EDIT: the signing code now always uses the ladder
sipa force-pushed on Oct 26, 2014
sipa force-pushed on Oct 26, 2014
sipa commented at 11:37 AM on October 26, 2014: contributor

@gmaxwell review requested
sipa force-pushed on Oct 26, 2014
Abstract out inversion modulo order into secp256k1_ge_scalar_inv 2eaa2056c9
Implement inverse modulo order using ladder 18bd4a33f7
sipa force-pushed on Oct 27, 2014
sipa commented at 7:54 AM on November 5, 2014: contributor

Closing, this is pretty outdated with scalar operations outsourced to secp256k1_scalar_t.
sipa closed this on Nov 5, 2014

Contributors