ECC changes

NIIBE Yutaka gniibe at
Thu Aug 24 04:31:00 CEST 2017


When I visited Cologne last year, I addressed that we could
improve ECC implementation of libgcrypt.

This summer, I created a ticket for one thing: field specific

And I did some work for 25519.  (We also can do for other curves.)

While it's faster than current implementation, please note that this is
still much slower than the original implementation of Ed25519/X25519.
The original implementation doesn't use MPI, but uses its own field
element representation.

Introducing different field element representations should be done in
future.  I think that some restructuring is needed for libgcrypt to do

More information about the Gnupg-devel mailing list