0
$\begingroup$

I will ask the previous question again in a simpler form. Please do not scold me for the formatting.

I have a Ristretto encoding, and there is ed25519 (the main subgroup), let's denote the correspondence between the points by f(encode/decode).

In ristretto, the generator is selected, G_R, in ed25519 the base point is B. Is it true that f(B) = G_R? If not, then there is A: f(A) = G_R, what is the scalar s equal to (how is it calculated): sB = A, i.e. what is the discrete logarithm of A relative to B?

Or does no one know this? The question is asked because I want to execute some protocol in a ristretto group (for example, share a secret and generate a group key) and then translate the "result" into ed25519.

Improve this question
$\endgroup$

1 Answer 1

Reset to default
0
$\begingroup$

As far as I understand, this is directly stated in rfc9496 - the ristretto group generator is chosen precisely by "encoding" the ed base point, for easier compatibility.

that is, the answer to my question is yes. s=1, and Feldman's commits, "converged" in the ristretto group, will converge after all elements from the list of commits are translated into ed-points

if anyone can - please confirm

Improve this answer
$\endgroup$
1
  • $\begingroup$ Just in case, I wrote some python code that confirmed this. $\endgroup$ Commented Jul 23 at 22:01

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.