| @@ -1,3 +1,24 @@ | |||||
| March 23, 2015: | |||||
| I've been fleshing out Decaf, and hopefully the API is somewhere | |||||
| near final. I will probably move a few things around and add a | |||||
| scalar inversion command (for AugPAKE and such). | |||||
| I've built a "decaf_fast" implementation which is about as fast as | |||||
| Goldilocks, except that verification still isn't as fast, because | |||||
| it needs a precomputed wNAF table which I haven't implemented yet. | |||||
| Precomputation is noticeably faster than in Goldilocks; while | |||||
| neither is especially optimized, the extended point format works | |||||
| slightly better for that purpose. | |||||
| While optimizing decaf_fast I also found a minor perf problem in | |||||
| the constant time lookup code, so that's fixed (I hope?) and | |||||
| everything is faster at least on my test machine. | |||||
| At some point soon-ish, I'd like to start removing the base | |||||
| Goldilocks code from this branch. That will require porting more | |||||
| of the tests. I might make a C++ header for Decaf, which would | |||||
| definitely simplify testing. | |||||
| March 1, 2015: | March 1, 2015: | ||||
| While by no means complete or stable, I've done most of the ground | While by no means complete or stable, I've done most of the ground | ||||
| work to implement the "Decaf" point encoding. This point encoding | work to implement the "Decaf" point encoding. This point encoding | ||||