def public_key_at

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/ed25519.bend:251

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/sha512.bend as SHA

251# at p = prime(one); a function of p first, so the checker keeps it a call
252# (p is symbolic) instead of expanding it whenever it compares two of them
253def public_key_at(+one: Nat, p: Nat, +seed: List<&2, U32>) -> List<&2, U32>:
254  match p:
255    case 0n:
256      public_of(one, 0n, dconst(one, 0n), SHA.sha512_bytes(seed))
257    case 1n+ +q:
258      public_of(one, 1n+q, dconst(one, 1n+q), SHA.sha512_bytes(seed))