• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Taspi
      • Bitcoin
      • Riscv
      • Des
      • Ethereum
        • Mmp-trees
        • Semaphore
          • Verify-semaphore-r1cs
          • Mimc
          • Semaphore-specification
            • Prime-field-abbreviations
            • Pedersen-hash
            • Pedersen-hash-base-points
            • Baby-jubjub
              • Baby-jubjub-order
              • Baby-jubjub-prime
              • Baby-jubjub-order/8
              • Baby-jubjub-d
              • Baby-jubjub-pointp
              • Baby-jubjub-mul
              • Baby-jubjub-curve
                • Baby-jubjub-a
                • Point-on-baby-jubjub-p
                • Baby-jubjub-add
            • Semaphore-proofs
          • Database
          • Cryptography
          • Rlp
          • Transactions
          • Hex-prefix
          • Basics
          • Addresses
        • X86isa
        • Sha-2
        • Yul
        • Zcash
        • Proof-checker-itp13
        • Regex
        • ACL2-programming-language
        • Json
        • Jfkr
        • Equational
        • Cryptography
        • Poseidon
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Baby-jubjub

    Baby-jubjub-curve

    The BabyJubjub curve.

    Signature
    (baby-jubjub-curve) → curve
    Returns
    curve — Type (twisted-edwards-curvep curve).

    The fact that a is a square and d is not a square (see baby-jubjub-a and baby-jubjub-d) means that BabyJubjub is a complete twisted Edwards curve, i.e. the addition formula is complete (works for all points).

    Definitions and Theorems

    Function: baby-jubjub-curve

    (defun baby-jubjub-curve nil
      (declare (xargs :guard t))
      (let ((acl2::__function__ 'baby-jubjub-curve))
        (declare (ignorable acl2::__function__))
        (make-twisted-edwards-curve :p (baby-jubjub-prime)
                                    :a (baby-jubjub-a)
                                    :d (baby-jubjub-d))))

    Theorem: twisted-edwards-curvep-of-baby-jubjub-curve

    (defthm twisted-edwards-curvep-of-baby-jubjub-curve
      (b* ((curve (baby-jubjub-curve)))
        (twisted-edwards-curvep curve))
      :rule-classes :rewrite)

    Theorem: twisted-edwards-curve-completep-of-baby-jubjub-curve

    (defthm twisted-edwards-curve-completep-of-baby-jubjub-curve
      (twisted-edwards-curve-completep (baby-jubjub-curve)))