Pieter Wuille 277b224b6a Use modified divsteps with initial delta=1/2 for constant-time ...

Instead of using eta=-delta, use zeta=-(delta+1/2) to represent
delta. This variant only needs at most 590 iterations for 256-bit
inputs rather than 724 (by convex hull bounds analysis).

2021-04-13 11:59:11 -07:00

..

safegcd_implementation.md

Use modified divsteps with initial delta=1/2 for constant-time

2021-04-13 11:59:11 -07:00