Hacker News new | ask | show | jobs
by oleganza 1205 days ago
Ristretto is a restricted form of Decaf, that is, specific to curve25519 and deals with a sign choice, while Decaf is generic for all cofactor-4 Edwards curves.

In other words, the joke around coffee takes a 90ยบ turn with Ristretto because our first application was Bulletproofs where you need (among other things) a lot of orthogonal generator points.