Score:1

Differing result between doubling and addition in extended twisted Edwards coordinates

vu flag

While coding for Edwards curve, I noticed that, the addition formula and the doubling formula return what seems to be different result.

I took the adding and doubling formula from both RFC-8032 and https://eprint.iacr.org/2008/522 and confirmed this difference.

Why is that? How does it, if it does effect computations within EdDSA?

knaccc avatar
es flag
If you wanted to set P to the Ed25519 base point, what 4 component values would you use for P? I'm guessing the problem is related to confusion between coordinate systems. When you add, normally the Augend is in P3 coordinate space, and the Addend is converted to "cached" coordinate space first, where the conversion is (X,Y,Z,T)->(Y + X, Y - X, Z, 2*d*T).
DannyNiu avatar
vu flag
Sorry, my fault. It's neither the addition nor the doubling that's incorrect. It's that I'm generating points with random coordinates which are not valid curve points
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.