pub fn swu(a: Fe) -> Ge
Expand description

Algebraically distribute a field element over the secp256k1 curve as defined in “Indifferentiable Hashing to Barreto-Naehrig Curves” by Pierre-Alain Fouque, Mehdi Tibouchi.

While this by itself is not a cryptographic hash function, it can be used as a subroutine in a hash_to_curve function. However, the distribution only approaches uniformity when it is called twice.

§Cost

32120 mWU (milli weight units)