Skip to content

Conversation

@TomWambsgans
Copy link
Contributor

No description provided.

Copy link
Contributor

@b-wagn b-wagn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable to me.

One thing we should probably do though:
I would then make the message hash tweaks have the same structure, namely have it of length three and put the domain separator in the 8 least significant bits of the third field element (right now, it is just two field elements there as well, see here). In this way, it will be more clear that there are no collisions.

Comment on lines +42 to +45
const _: () = assert!(
F::ORDER_U64 > 1 << 30,
"we need to store 30 bits in one field element"
);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: throughout the codebase, such checks are usually done in internal_consistency_check()

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants