def x25519_raw

bend-collections-laws-crypto@1.0.0.0 · src/crypto/curve25519/x25519.bend:123

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/curve25519/field.bend as F

123# X25519 on two 32-byte strings of bytes below 256
124def x25519_raw(+k: List<&2, U32>, u: List<&2, U32>) -> List<&2, U32>:
125  +x1 = F.of_bytes(u)
126  finish(ladder(nbits(k), a24(), clamp(k), x1, St{F.one(), F.zero(), x1, F.one(), 0}))