1use ark_ec::{
 2    models::CurveConfig,
 3    twisted_edwards::{Affine, MontCurveConfig, Projective, TECurveConfig},
 4};
 5use ark_ff::MontFp;
 6
 7use crate::{Fq, Fr};
 8
 9#[cfg(test)]
10mod tests;
11
12pub type EdwardsAffine = Affine<EdwardsConfig>;
13pub type EdwardsProjective = Projective<EdwardsConfig>;
14
15#[derive(Clone, Default, PartialEq, Eq)]
16pub struct EdwardsConfig;
17
18impl CurveConfig for EdwardsConfig {
19    type BaseField = Fq;
20    type ScalarField = Fr;
21
22    /// COFACTOR = 8
23    const COFACTOR: &'static [u64] = &[8];
24
25    /// COFACTOR^(-1) mod r =
26    /// 12124894969357926281749346891948134384518445910386624712788431705725441736421489799867521238554906438478484045560
27    const COFACTOR_INV: Fr = MontFp!("12124894969357926281749346891948134384518445910386624712788431705725441736421489799867521238554906438478484045560");
28}
29
30impl TECurveConfig for EdwardsConfig {
31    /// COEFF_A = -1 =
32    const COEFF_A: Fq = MontFp!("-1");
33
34    /// COEFF_D = 79743
35    const COEFF_D: Fq = MontFp!("79743");
36
37    /// AFFINE_GENERATOR_COEFFS = (GENERATOR_X, GENERATOR_Y)
38    const GENERATOR: EdwardsAffine = EdwardsAffine::new_unchecked(GENERATOR_X, GENERATOR_Y);
39
40    type MontCurveConfig = EdwardsConfig;
41
42    /// Multiplication by `a` is just negation.
43    #[inline(always)]
44    fn mul_by_a(elem: Self::BaseField) -> Self::BaseField {
45        -elem
46    }
47}
48
49impl MontCurveConfig for EdwardsConfig {
50    /// COEFF_A = 0x95D53EB3F6AC3F7A53C26020144439DC6073BCAE513E03FD06B6B3BAA390F25E51534B26719E33F4CD906D4DA9B535
51    const COEFF_A: Fq = MontFp!("90083623084271891037116870487743067984710080209539149685414147055329063590616489392386084989619674926965747987765");
52
53    /// COEFF_B = 0x118650763CE64AB4BE743604C8D05013DC2663652A3D58B21ECAB7BFF65B70DB8BA09F9098E61CC903B2F92B2564ACA
54    const COEFF_B: Fq = MontFp!("168580802928697202973535863207150465551683432545375510854470115611391404757724333382582803149953685197474573470410");
55
56    type TECurveConfig = EdwardsConfig;
57}
58
59/// GENERATOR_X =
60/// 174701772324485506941690903512423551998294352968833659960042362742684869862495746426366187462669992073196420267127
61const GENERATOR_X: Fq = MontFp!("174701772324485506941690903512423551998294352968833659960042362742684869862495746426366187462669992073196420267127");
62
63/// GENERATOR_Y =
64/// 208487200052258845495340374451540775445408439654930191324011635560142523886549663106522691296420655144190624954833
65const GENERATOR_Y: Fq = MontFp!("208487200052258845495340374451540775445408439654930191324011635560142523886549663106522691296420655144190624954833");