|
|
|---|
|
|
|
|---|
Instantiation of Poseidon used by Ingonyama for the BN-254 scalar field.
This is an instantiation of the Poseidon permutation used by Ingonyama,
as described in the URL below.
It uses the Poseidon permutation but not any sponge absorb or squeeze steps.
The number of input field elements is constrained to be no more than
This particular instantiation has 1 capacity and 2 rate field elements, 8 full rounds, 57 partial rounds, and an alpha of 5. The field is the prime order of the group defined by BN-254, which is also the base field in which the Baby Jubjub curve is defined.
There is no domain separation defined for this instantiation, so the caller must make sure to do their own padding and not to expect different results for inputs of [1] and [0,1], for example
Note, there is also a test case for this instantiation
in the source file