Expand description
High-throughput strict Ed25519 verification for 64-byte messages.
StrictVerifyCore evaluates the complete Ed25519 equation in hardware:
SHA-512 challenge hashing, reduction modulo l, strict point decoding,
fixed-base [S]B, variable-base [k]A, and the projective equality check.
Intermediate points are joined by a 64-entry on-chip context store. No
prehashing, external DRAM, HBM, or host arithmetic is part of the path.
Structs§
- Strict
Verify Core - Entire strict verifier, expressed as one synthesizable RHDL module graph.
- Strict
Verify In - Input channel of
StrictVerifyCore. - Strict
Verify Out - Output and flow control of
StrictVerifyCore.
Constants§
- VERIFY_
BAD_ PUBLIC_ KEY - Public-key encoding is not canonical or not on the curve.
- VERIFY_
BAD_ R - Signature
Rencoding is not canonical or not on the curve. - VERIFY_
EQUATION_ FAILURE - The Ed25519 group equation did not hold.
- VERIFY_
NONCANONICAL_ S - Signature scalar
Sis not canonical. - VERIFY_
OK - Verification completed successfully.
- VERIFY_
SMALL_ PUBLIC_ KEY - Public key is a low-order point.
- VERIFY_
SMALL_ R - Signature
Ris a low-order point.
Functions§
- strict_
verify_ kernel - State transition for
StrictVerifyCore.