Available on crate feature
ed25519
only.Expand description
Proofs of knowledge of discrete logarithm on Edwards twist of curve25519 using using curve25519-dalek
.
WARNING: This does not check whether the points are in the prime-order subgroup. For the
proof to be completely sound this needs to be checked by the verifier with is_torsion_free
.
This code is mostly here to demonstrate that you can prove a secp256k1 and ed25519 public key
have the same secret key for use in cross-chain atomic swaps between Bitcoin and Monero. If you
are developing a cryptosystem from scratch you should use ristretto
instead.
Re-exports§
pub use curve25519_dalek;
Structs§
- Proves knowledge of
x
such thatA = x * B
for someA
andB
included in the statement. - Proves knowledge of
x
such thatA = x * G
for someA
included in the statement.G
is the standard basepoint used in the ed25519 signature scheme and is not included in the statement.