--- Log opened Wed Jan 29 00:00:23 2020
01:04 < elichai2> If we really care about the Jacobi times we can continue the work to do it faster (ie without just sqrt) andytoshi had done some work in the past and I also built on his and improved and added things, but I left it after IBD benchmarks showed that assumevalid makes this negligible
01:04 < elichai2> And then we can reuse those inv functions to also speed up Jacobian->affine when the point isn't secret
01:07 < elichai2> Arghh sorry forget the last line, jac->affine doesn't have inverses
01:07 < sipa> sure it does
01:08 < sipa> (x,y,z) -> (x/z^2,y/z^3)
01:08 < elichai2> Isn't it x*z^2 and y*z^3
01:08 < sipa> no
01:08 < elichai2> Oh right it's the opposite, I never remember what direction is the division
01:09 < elichai2> (if from affine to jacobian or from jacobian to affine)
01:09 < sipa> it's the reason why bip340 uses quadratic residue as a tie breaker, because jacobi symbols are faster than inverss
01:10 < sipa> and jacobi can be computed while in jacobian coordinates
01:10 < sipa> while oddness needs conversion to affine (and thus an inverse) first
01:10 < elichai2> Anyhow if we really want to improve this then continuing the work on bignum might help, I'm just not sure if that's the biggest performance problem to tackle in bitcoin
01:11 < elichai2> sipa: what confused me is that no matter if it's division or mult the aff->jac is free because z=1
01:12 < sipa> yeah
02:36 < gmaxwell> Better make sure you hash your darn ECDH output: https://link.springer.com/article/10.1007/s10623-019-00685-y?wt_mc=alerts.TOCjournals&utm_source=toc&utm_medium=email&utm_campaign=toc_10623_88_2
03:05 -!- belcher [~belcher@unaffiliated/belcher] has joined #secp256k1
05:10 -!- real_or_random [~real_or_r@2a02:c207:3002:7468::1] has joined #secp256k1
05:37 -!- jonatack [~jon@2a01:e0a:53c:a200:bb54:3be5:c3d0:9ce5] has quit [Ping timeout: 248 seconds]
06:47 -!- jonatack [~jon@2a01:e0a:53c:a200:bb54:3be5:c3d0:9ce5] has joined #secp256k1
07:04 -!- jonatack [~jon@2a01:e0a:53c:a200:bb54:3be5:c3d0:9ce5] has quit [Ping timeout: 248 seconds]
09:08 -!- jonatack [~jon@54.76.13.109.rev.sfr.net] has joined #secp256k1
09:12 -!- jonatack [~jon@54.76.13.109.rev.sfr.net] has quit [Ping timeout: 265 seconds]
09:13 -!- jonatack [~jon@213.152.161.170] has joined #secp256k1
12:57 -!- jonatack [~jon@213.152.161.170] has quit [Ping timeout: 265 seconds]
14:14 -!- meshcollider [meshcollid@209.141.50.204] has quit [Remote host closed the connection]
16:03 -!- meshcollider [meshcollid@gateway/shell/ircnow/x-ljjxmkqlqsykocbq] has joined #secp256k1
16:45 -!- meshcollider [meshcollid@gateway/shell/ircnow/x-ljjxmkqlqsykocbq] has quit [Quit: ZNC 1.7.4 - https://znc.in]
16:53 -!- belcher [~belcher@unaffiliated/belcher] has quit [Quit: Leaving]
17:05 -!- jonatack [~jon@2a01:e0a:53c:a200:bb54:3be5:c3d0:9ce5] has joined #secp256k1
17:33 -!- meshcollider [meshcollid@gateway/shell/ircnow/x-sbtjxckdujyurjue] has joined #secp256k1
--- Log closed Thu Jan 30 00:00:24 2020