code wiki / (root) / nx_ed25519_arith_test.nx

nx_ed25519_arith_test.nx

buildroot/runtime/nx_ed25519_arith_test.nx

3641 B110 linesdepth 7pulls 7 transitivereach 0 importersview sourcekind gate/prooftopic ed25519
docsdependenciesstructsconstsfunctions

about

nx_ed25519_arith_test.nx -- KAT for Edwards-curve arithmetic. Verifies: A. Identity point (0, 1, 1, 0) compresses to canonical y=1, sign-x=0 encoding (byte 0 = 0x01, all others 0) B. P + (-P) == identity (via compressed equality) C. P + identity == P (identity is the additive neutral) D. double(B) == B + B (where B = Ed25519 basepoint) E. double(B) is on the curve F. Triple via add(double(B), B) == B + B + B (associativity check) G. Compress(decompress(B_bytes)) == B_bytes (round-trip via the basepoint canonical encoding 5866...66) expect_exit: 0 license_tier: ORIGINAL

dependencies 5 imports · 0 importers

nx_syscalls.nx nx_x25519.nx nx_ed25519_field.nx nx_ed25519_point.nx nx_ed25519_arith.nx nx_ed25519_arith_test.nx

imports: nx_syscalls.nxnx_x25519.nxnx_ed25519_field.nxnx_ed25519_point.nxnx_ed25519_arith.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main ge_p3_alloc sys_mmap nxa_die sys_write sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ ge_p3_identity sys_mmap ↻ ge_p3_compress sys_mmap ↻ ge_p3_decompress sys_mmap ↻ ed25519_d_fe sys_mmap ↻ ed25519_d_bytes fe_pow22523 fe_neg fe_canonical_equal sys_mmap ↻ ed25519_sqrt_m1_fe sys_mmap ↻ ed25519_sqrt_m1_bytes ge_p3_negate fe_neg ↻ ge_p3_add ed25519_d_fe ↻ ge_p3_equal sys_mmap ↻ ge_p3_compress ↻

structs

none

consts

none

functions

23func main() -> i64