https://github.com/daira/jubjub
Supporting evidence for security of the Jubjub curve to be used in Zcash
https://github.com/daira/jubjub
cryptography elliptic-curves mathematics sagemath zcash
Last synced: about 2 months ago
JSON representation
Supporting evidence for security of the Jubjub curve to be used in Zcash
- Host: GitHub
- URL: https://github.com/daira/jubjub
- Owner: daira
- License: mit
- Created: 2017-11-02T06:07:18.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2021-09-03T12:26:13.000Z (over 3 years ago)
- Last Synced: 2025-02-04T22:30:36.566Z (4 months ago)
- Topics: cryptography, elliptic-curves, mathematics, sagemath, zcash
- Language: Sage
- Size: 7.81 KB
- Stars: 16
- Watchers: 4
- Forks: 9
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
Jubjub supporting evidence
--------------------------
This repository contains supporting evidence that the twisted Edwards curve
-x^2 + y^2 = 1 - (10240/10241).x^2.y^2 of rational points over
GF(52435875175126190479447740508185965837690552500527637822603658699938581184513),
[also called "Jubjub"](https://z.cash/technology/jubjub.html),
satisfies the [SafeCurves criteria](https://safecurves.cr.yp.to/index.html).
The script ``verify.sage`` is based on
[this script from the SafeCurves site](https://safecurves.cr.yp.to/verify.html),
modified
* to support twisted Edwards curves;
* to generate a file 'primes' containing the primes needed for primality proofs,
if it is not already present;
* to change the directory in which Pocklington proof files are generated
(``proof/`` rather than ``../../../proof``), and to create that directory
if it does not exist.
Prerequisites:
* apt-get install sagemath
* sage --pip install sortedcontainers
Run ``sage verify.sage .``, or ``./run.sh`` to also print out the results.
Note that the "rigidity" criterion cannot be checked automatically.