• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Apt
        • Error-checking
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Set
        • Soft
        • C
        • Bv
        • Imp-language
        • Event-macros
        • Java
        • Bitcoin
        • Ethereum
        • Yul
        • Zcash
          • Jubjub
            • Jubjub-abst
            • Jubjub-r-pointp
            • Jubjub-pointp
            • Jubjub-d
            • Jubjub-montgomery
            • Maybe-jubjub-pointp
            • Jubjub-point->u
            • Jubjub-q
            • Jubjub-point->v
            • Point-on-jubjub-p
            • Jubjub-rstar-pointp
            • Jubjub-add
            • Jubjub-r-properties
            • Jubjub-point-abscissa-is-not-1
            • Jubjub-mul
            • Jubjub-curve
            • Jubjub-a
              • Jubjub-neg
              • Jubjub-r
              • Jubjub-point-satisfies-curve-equation
              • Jubjub-h
              • Jubjub-mul-of-2
              • *jubjub-l*
            • Verify-zcash-r1cs
            • Lift-zcash-r1cs
            • Pedersen-hash
            • Zcash-gadgets
            • Bit/byte/integer-conversions
            • Constants
            • Blake2-hash
            • Randomness-beacon
          • ACL2-programming-language
          • Prime-fields
          • Json
          • Syntheto
          • File-io-light
          • Cryptography
          • Number-theory
          • Lists-light
          • Axe
          • Builtins
          • Solidity
          • Helpers
          • Htclient
          • Typed-lists-light
          • Arithmetic-light
        • X86isa
        • Axe
        • Execloader
      • Math
      • Testing-utilities
    • Jubjub

    Jubjub-a

    The Jubjub coefficient a_\mathbb{J} [ZPS:5.4.9.3].

    Signature
    (jubjub-a) → a
    Returns
    a — Type (fep a (jubjub-q)).

    We show that this coefficient is a square by exhibiting a square root of it.

    Definitions and Theorems

    Function: jubjub-a

    (defun jubjub-a nil
      (declare (xargs :guard t))
      (let ((__function__ 'jubjub-a))
        (declare (ignorable __function__))
        (neg 1 (jubjub-q))))

    Theorem: return-type-of-jubjub-a

    (defthm return-type-of-jubjub-a
      (b* ((a (jubjub-a))) (fep a (jubjub-q)))
      :rule-classes :rewrite)

    Theorem: jubjub-a-not-zero

    (defthm jubjub-a-not-zero
      (not (equal (jubjub-a) 0)))

    Theorem: pfield-squarep-of-jubjub-a

    (defthm pfield-squarep-of-jubjub-a
      (ecurve::pfield-squarep (jubjub-a)
                              (jubjub-q)))