Crate ark_ed_on_bls12_381_bandersnatch

This library implements the Bendersnatch curve, a twisted Edwards curve whose base field is the scalar field of the curve BLS12-381. This allows defining cryptographic primitives that use elliptic curves over the scalar field of the latter curve. This curve was generated by Simon Masson from Anoma, and Antonio Sanso from Ethereum Foundation, and is also known as bandersnatch.

See here for the specification of the curve. There was also a Python implementation here.

Curve information:

• Base field: q = 52435875175126190479447740508185965837690552500527637822603658699938581184513
• Scalar field: r = 13108968793781547619861935127046491459309155893440570251786403306729687672801
• Valuation(q - 1, 2) = 32
• Valuation(r - 1, 2) = 5
• Curve equation: ax^2 + y^2 =1 + dx^2y^2, where
  • a = -5
  • d = 45022363124591815672509500913686876175488063829319466900776701791074614335719

Modules

fq

fr

Structs

BandersnatchConfig

bandersnatch is an incomplete twisted Edwards curve. These curves have equations of the form: ax² + y² = 1 + dx²y². over some base finite field Fq.

FqConfig

FrConfig

Constants

SW_GENERATOR_X

x coordinate for SW curve generator

SW_GENERATOR_Y

y coordinate for SW curve generator

TE_GENERATOR_X

x coordinate for TE curve generator

TE_GENERATOR_Y

y coordinate for TE curve generator

Type Aliases

EdwardsAffine

EdwardsConfig

EdwardsProjective

Fq

Fr

SWAffine

SWConfig

SWProjective