Please check the build logs for more information.
See Builds for ideas on how to fix a failed build, or Metadata for how to configure docs.rs builds.
If you believe this is docs.rs' fault, open an issue.
Unsigned 256-bit integers
Implementation of 256-bit unsigned integers.
Warning. Side-channel resistance is currently not implemented. This library is optimized for performance and does not use slower side-channel resistant algorithms. Please evaluate the risks before using with sensitive data.
Note. Code coverage in Rust is still very early days. The above number is likely inaccurate. Please view the coverage report for details.
Testing
See CircleCI documentation on how to run tests locally.
Benchmark
Checkout master branch:
Benchmarking using Mac OS' instrumentation. For this we need the cargo-instruments plugin for Cargo.
You can then run tests under profiling. It is recommended to filter for a specific test.
Goals
- Perfomance optimized for Native and WebAssembly
- Generality
- Later: Constant-time operations.
- Prefer
const fnover procedural macros.
For optimization, there are a few different scenarios:
Note: The modulus is always assumed to be 256bit or less.
- Programmer time known fields. The programmer can supply hand tuned optimized implementations of various algorithms. Ideally well performing defaults are provided.
- Compiler time known fields. The compiler can compute constants, for example for Montgomery representation. The field parameters should be inlined.
- Statically runtime known fields. Modulus is not known during compilation (but it's size is). Element membership of a particular field is known at compile time. The field parameters should statically allocated and the pointers inlined.
- Dynamically runtime known fields. Modulus is not known during compilation (but its size is). Element membership of a particular field is not known at compile time. The field element should carry a pointer to the field parameters.
References and benchmarks
- A sophisticated rust implementation of Curve25519. https://github.com/dalek-cryptography/curve25519-dalek
- A rust library for constant time algorithms. https://github.com/dalek-cryptography/subtle
- Probably the most tuned curve out there.
https://github.com/bitcoin-core/secp256k1
- Rust bindings: https://crates.io/crates/secp256k1
- Rust port: https://crates.io/crates/libsecp256k1
- A fork of secp256k1 favouring performance over constant-timeness. https://github.com/llamasoft/secp256k1_fast_unsafe
- ZCash implementation of Sappling: https://github.com/zkcrypto/bellman
- Fast implementation of zksnark in java https://github.com/scipr-lab/dizk
References
- Handbook of Applied Cryptography http://cacr.uwaterloo.ca/hac/
- Guide to Elliptic Curve Cryptography https://cdn.preterhuman.net/texts/cryptography/Hankerson,%20Menezes,%20Vanstone.%20Guide%20to%20elliptic%20curve%20cryptography%20(Springer,%202004)(ISBN%20038795273X)(332s)_CsCr_.pdf