• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
      • Kestrel-books
        • Crypto-hdwallet
        • Apt
        • Error-checking
        • Fty-extensions
        • Isar
        • Kestrel-utilities
        • Set
        • Soft
        • C
        • Bv
        • Imp-language
        • Event-macros
        • Java
        • Bitcoin
        • Ethereum
        • Yul
        • Zcash
          • Jubjub
            • Jubjub-abst
            • Jubjub-r-pointp
            • Jubjub-pointp
            • Jubjub-d
            • Jubjub-montgomery
              • Not-pfield-squarep-of-jubjub-montgomery-a-square-minus-4
              • Jubjub-montgomery-a
              • Jubjub-montgomery-curve
              • Jubjub-montgomery-b
            • Maybe-jubjub-pointp
            • Jubjub-point->u
            • Jubjub-q
            • Jubjub-point->v
            • Point-on-jubjub-p
            • Jubjub-rstar-pointp
            • Jubjub-add
            • Jubjub-r-properties
            • Jubjub-point-abscissa-is-not-1
            • Jubjub-mul
            • Jubjub-curve
            • Jubjub-a
            • Jubjub-neg
            • Jubjub-r
            • Jubjub-point-satisfies-curve-equation
            • Jubjub-h
            • Jubjub-mul-of-2
            • *jubjub-l*
          • Verify-zcash-r1cs
          • Lift-zcash-r1cs
          • Pedersen-hash
          • Zcash-gadgets
          • Bit/byte/integer-conversions
          • Constants
          • Blake2-hash
          • Randomness-beacon
        • ACL2-programming-language
        • Prime-fields
        • Json
        • Syntheto
        • File-io-light
        • Cryptography
        • Number-theory
        • Lists-light
        • Axe
        • Builtins
        • Solidity
        • Helpers
        • Htclient
        • Typed-lists-light
        • Arithmetic-light
      • X86isa
      • Axe
      • Execloader
    • Math
    • Testing-utilities
  • Jubjub

Jubjub-montgomery

The Montgomery form of the Jubjub curve [ZPS:A.2].

The Jubjub curve \mathbb{J} [ZPS:5.4.9.3] is a twisted Edwards curve. However, because of the birational equivalence between Montgomery and twisted Edwards curves, there is also a Montgomery form of Jubjub \mathbb{M} [ZPS:A.2]. Here we define it, using our general mapping, and show some properties of it. This mapping uses a scaling factor, which ensures that the resulting Montgomery B is 1.

Subtopics

Not-pfield-squarep-of-jubjub-montgomery-a-square-minus-4
Theorem related to the exceptional points in the birational mapping.
Jubjub-montgomery-a
The Jubjub coefficient A_\mathbb{M} [ZPS:A.2].
Jubjub-montgomery-curve
The Jubjub curve in Montgomery form [ZPS:A.2].
Jubjub-montgomery-b
The Jubjub coefficient B_\mathbb{M} [ZPS:A.2].