This commit is contained in:
lda committed 2026-03-14 04:53:21 +07:00
1 parent 7e4c6dd3cd
commit 50ea8ef93d
1 file changed
+5 -5
+5 -5
View File
@@ -105,7 +105,7 @@ $$
y_1 &= e_k(IV) \oplus x_1 \\
y_i &= e_k(y_{i-1}) \oplus x_i \\
x_1 &= e_k(IV) \oplus y_1 \\
x_i &= e_k(y*{i-1}) \oplus y_i \\
x_i &= e_k(y_{i-1}) \oplus y_i \\
\end{aligned}
$$
@@ -132,13 +132,13 @@ two kinds apparently. idk
we have $e_1 = 1$
do $x^{\overline{e_1}_2} \pmod n$
do $x^{\overline{e_1}} \pmod n$
2. sq step
we are trying to expand Ts to $x^{\overline{e_1e_2}}$
so we first do $x^{\overline{e_10}_2}$ aka $x^{\overline{e_1}_2 \cdot 2}$
so we first do $x^{\overline{e_10}}$ aka $x^{\overline{e_1} \cdot 2}$
do $ans^2 \pmod n$
@@ -146,7 +146,7 @@ two kinds apparently. idk
if $e_2$ conveniently equals 0, skip Ts.
so $x^{\overline{e_10}_2}$ needs to become $x^{\overline{e_11}_2}$
so $x^{\overline{e_10}}$ needs to become $x^{\overline{e_11}}$
that means you needa multiply by x.
@@ -230,7 +230,7 @@ for authentication. is this really you type shit.
calc r = alpha ^ ke mod p
$$ s = (x - d \cdot r) k_e^-1 \pmod{p-1}$$
$$ s = (x - d \cdot r) k_e^{-1} \pmod{p-1}$$
give (r, s) to whoever is gonna verify yo msg