blob: 9f5d5cfab3cee654357870b8be36d17c3fa8d28c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
Require Import Coq.Classes.Morphisms. Require Coq.Setoids.Setoid Crypto.Util.Relations.
Require Import Crypto.Algebra.Hierarchy Crypto.Algebra.Ring Crypto.Algebra.Field.
Require Import Crypto.Util.Notations Crypto.Util.Decidable (*Crypto.Util.Tactics*).
Require Import Coq.PArith.BinPos.
Section Edwards.
Context {F eq zero one opp add sub mul inv div}
{field:@Algebra.Hierarchy.field F eq zero one opp add sub mul inv div}
{eq_dec:DecidableRel eq}.
Local Infix "=" := eq. Local Notation "a <> b" := (not (a = b)).
Local Infix "=" := eq : type_scope. Local Notation "a <> b" := (not (a = b)) : type_scope.
Local Notation "0" := zero. Local Notation "1" := one.
Local Infix "+" := add. Local Infix "*" := mul.
Local Infix "-" := sub. Local Infix "/" := div.
Local Notation "x ^ 2" := (x*x).
Context (a:F) (a_nonzero : a<>0) (a_square : exists sqrt_a, sqrt_a^2 = a).
Context (d:F) (d_nonsquare : forall sqrt_d, sqrt_d^2 <> d).
Context {char_ge_3:@Ring.char_ge F eq zero one opp add sub mul 3}.
Local Notation onCurve x y := (a*x^2 + y^2 = 1 + d*x^2*y^2) (only parsing).
Lemma onCurve_zero : onCurve 0 1.
Proof using a_nonzero eq_dec field.
fsatz. Qed.
Section Addition.
Context (x1 y1:F) (P1onCurve: onCurve x1 y1).
Context (x2 y2:F) (P2onCurve: onCurve x2 y2).
Lemma denominator_nonzero : (d*x1*x2*y1*y2)^2 <> 1.
Proof using Type*.
destruct a_square as [sqrt_a], (dec(sqrt_a*x2+y2 = 0)), (dec(sqrt_a*x2-y2 = 0));
try match goal with [H: ?f (sqrt_a * x2) y2 <> 0 |- _ ]
=> pose proof (d_nonsquare ((f (sqrt_a * x1) (d * x1 * x2 * y1 * y2 * y1))
/(f (sqrt_a * x2) y2 * x1 * y1 )))
end; Field.fsatz.
Qed.
Lemma denominator_nonzero_x : 1 + d*x1*x2*y1*y2 <> 0.
Proof using Type*. pose proof denominator_nonzero. Field.fsatz. Qed.
Lemma denominator_nonzero_y : 1 - d*x1*x2*y1*y2 <> 0.
Proof using Type*. pose proof denominator_nonzero. Field.fsatz. Qed.
Lemma onCurve_add : onCurve ((x1*y2 + y1*x2)/(1 + d*x1*x2*y1*y2)) ((y1*y2 - a*x1*x2)/(1 - d*x1*x2*y1*y2)).
Proof using Type*. pose proof denominator_nonzero. Field.fsatz. Qed.
End Addition.
End Edwards.
|
