You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is no cofactor to clear since the curve is of prime order. However we can move from Bandersnatch to Banderwagon by adapting the deserialization strategy.
The documentation is clear on clearing Bandersnatch cofactor: https://hackmd.io/@6iQDuIePQjyYBqDChYw_jg/BJBNcv9fq#Bandersnatch-Subgroup
However it is unclear if this also applies for Banderwagon.
Clearing cofactor is necessary for a generic test suites for endomorphism acceleration (see #298)
The alternatives are:
(1-aX²)/p = 1
which is not ideally if probability is low as it will slow down CI.This is somewhat self-defeating if what we want to test is scalar multiplication
The text was updated successfully, but these errors were encountered: