Counting interface for the indifferentiability arc - #27

Merged

daira merged 14 commits into

mainfrom

indiff-counting

Aug 20, 2026

Commits on Aug 16, 2026

refactor(Isogenies): name the field-to-curve map f in mapHashOutputsToCurve

daira
and
claude
committed
0fba34f
feat(Hashing): nonzero preimage fibres of simplified SWU have at most 10 elements

daira
and
claude
committed
64a9165
feat(Hashing): the deployed mapToCurve fibre bound, per curve

daira
and
claude
committed
1ccea0d
feat(Hashing): deviation exports and the zero-repair pair transport

daira
and
claude
committed
db48e4f
feat(CurveForms): adopt the curve lemmas from ironwood's CompEllipticExtras

daira
and
claude
committed
5f02eb2
feat(Fields): the Fp/Fq letter abbreviations for the Pasta fields

daira
and
claude
committed
76532f9
feat(Hashing): the transported regularity distance for the deployed mapping

daira
and
claude
committed
a18340e
docs(Hashing): the Weil constant is not derived for the deployed variant

daira
and
claude
committed
a4d2cc7
docs(Hashing): the excluded zero input is added back by consumers

daira
and
claude
committed
77a50f3

Commits on Aug 17, 2026

docs(Hashing): the Weil constant for the deployed variant is calculated

daira
and
claude
committed
f5c1ddd
docs(design): the Weil-constant derivation write-up

daira
and
claude
committed
f66c933
docs(Hashing): make the spatial metaphor for applying the isogeny consistent
daira
committed
7df511d
docs(design): prove the calculated Weil bound

daira
and
claude
committed
eea393a
docs(Hashing): the deployed Weil bound is proven in the design doc

daira
and
claude
committed
ca31fb1