Module sigma_fun::ed25519 [−][src]
Expand description
Proofs of knowledge of discrete logarithm on Edwards twist of curve25519 using using curve25519-dalek
.
WARNING: This does not check whether the points are in the prime-order subgroup. For the
proof to be completely sound this needs to be checked by the verifier with is_torsion_free
.
This code is mostly here to demonstrate that you can prove a secp256k1 and ed25519 public key
have the same secret key for use in cross-chain atomic swaps between Bitcoin and Monero. If you
are developing a cryptosystem from scratch you should use ristretto
instead.
Re-exports
pub use curve25519_dalek;