def secret

bend-collections@1.0.0.0 · src/crypto/ed25519/ed25519.bend:28

import Base
import bend-collections@1.0.0.0/src/crypto/curve25519/field.bend as F
import bend-collections@1.0.0.0/src/crypto/curve25519/x25519.bend as X

28# the secret scalar s (pruned lower half of SHA-512(seed)) and the prefix
29def secret(+h: List<&2, U32>) -> List<&2, U32>:
30  X.clamp(F.take(32n, h))