Hacker News new | ask | show | jobs
by quesomaster9000 420 days ago
Well, I've tried manually verifying the curve parameters and I don't trust this.

* The generator isn't selected deterministically

* The BLAKE3(seed) in the OpenFrogget code doesn't match what I get with Python & Javascript implementation of Blake3, the index & seed aren't specified in the paper

* The paper doesn't provide a reference for why `a=-7` was chosen (presumably because of the GLV endomorphism)

* the various parameters differ between the reference implementation and the paper and the spec...

There are enough many holes in this that I wouldn't touch it yet, as a very quick glance into the spec & the code leaves me wondering why their claims of reproducibility & determinism re: the constants aren't true, and the documentation & code don't match what I can reproduce locally.

So uhh yea... No