• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Apt
        • Error-checking
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Set
        • Soft
        • C
        • Bv
        • Imp-language
        • Event-macros
        • Java
        • Bitcoin
        • Ethereum
          • Mmp-trees
          • Semaphore
            • Verify-semaphore-r1cs
            • Mimc
            • Semaphore-specification
              • Prime-field-abbreviations
              • Pedersen-hash
              • Pedersen-hash-base-points
              • Baby-jubjub
                • Baby-jubjub-order
                • Baby-jubjub-prime
                • Baby-jubjub-order/8
                • Baby-jubjub-d
                • Baby-jubjub-pointp
                • Baby-jubjub-mul
                • Baby-jubjub-curve
                  • Baby-jubjub-a
                  • Point-on-baby-jubjub-p
                  • Baby-jubjub-add
              • Semaphore-proofs
            • Database
            • Cryptography
            • Rlp
            • Transactions
            • Hex-prefix
            • Basics
            • Addresses
          • Yul
          • Zcash
          • ACL2-programming-language
          • Prime-fields
          • Json
          • Syntheto
          • File-io-light
          • Cryptography
          • Number-theory
          • Lists-light
          • Axe
          • Builtins
          • Solidity
          • Helpers
          • Htclient
          • Typed-lists-light
          • Arithmetic-light
        • X86isa
        • Axe
        • Execloader
      • Math
      • Testing-utilities
    • Baby-jubjub

    Baby-jubjub-curve

    The BabyJubjub curve.

    Signature
    (baby-jubjub-curve) → curve
    Returns
    curve — Type (twisted-edwards-curvep curve).

    The fact that a is a square and d is not a square (see baby-jubjub-a and baby-jubjub-d) means that BabyJubjub is a complete twisted Edwards curve, i.e. the addition formula is complete (works for all points).

    Definitions and Theorems

    Function: baby-jubjub-curve

    (defun baby-jubjub-curve nil
      (declare (xargs :guard t))
      (let ((acl2::__function__ 'baby-jubjub-curve))
        (declare (ignorable acl2::__function__))
        (make-twisted-edwards-curve :p (baby-jubjub-prime)
                                    :a (baby-jubjub-a)
                                    :d (baby-jubjub-d))))

    Theorem: twisted-edwards-curvep-of-baby-jubjub-curve

    (defthm twisted-edwards-curvep-of-baby-jubjub-curve
      (b* ((curve (baby-jubjub-curve)))
        (twisted-edwards-curvep curve))
      :rule-classes :rewrite)

    Theorem: twisted-edwards-curve-completep-of-baby-jubjub-curve

    (defthm twisted-edwards-curve-completep-of-baby-jubjub-curve
      (twisted-edwards-curve-completep (baby-jubjub-curve)))