mirror of
https://github.com/vitorpamplona/amethyst.git
synced 2026-08-10 00:16:59 +00:00
pOdd and pLamOdd always have identical Z coordinates (the GLV endomorphism λ(X,Y,Z) = (β·X, Y, Z) preserves Z). Previously we called batchToAffine separately for each table, paying two full field inversions (~270 field ops each). Now batchToAffinePair uses a single batch inversion and reuses the Z⁻¹ values for both tables. Saves ~270 field ops per mul/mulDoubleG call (~12% of ECDH cost). https://claude.ai/code/session_01BhU63WUe9AhikZxRdw3Lpg