diff options
| author | Samuel Neves <sneves@dei.uc.pt> | 2018-07-28 07:23:07 +0100 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2018-07-28 14:51:19 +0200 |
| commit | 981a0bd665f2eb5b0eb7625969ea588c3c67ed20 (patch) | |
| tree | 42e64b94f2b733244a371d4de730766898abee55 /kernel-tree-scripts | |
| parent | 06bab82a51b769ca96297d09ed96afcbcfb36189 (diff) | |
curve25519-x86_64: tighten reductions modulo 2^256-38
At this stage the value if C[4] is at most ((2^256-1) + 38*(2^256-1)) / 2^256 = 38,
so there is no need to use a wide multiplication.
Change inspired by Andy Polyakov's OpenSSL implementation.
Signed-off-by: Samuel Neves <sneves@dei.uc.pt>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'kernel-tree-scripts')
0 files changed, 0 insertions, 0 deletions