Struct TorsionImageWitness 

pub struct TorsionImageWitness {
    pub domain: Curve,
    pub codomain: Curve,
    pub degree: u64,
    pub torsion_order: u64,
    pub basis: (Point, Point),
    pub images: (Point, Point),
}

A re-checkable witness that an isogeny φ: E → E' is consistently specified by its action on an N-torsion basis — the SIDH/SIKE public-key format.

Fields

domain: Curve

codomain: Curve

degree: u64

The isogeny degree deg φ.

torsion_order: u64

The torsion order N (coprime to deg φ, so φ restricts to an isomorphism on E[N]).

basis: (Point, Point)

A basis (P, Q) of E[N].

images: (Point, Point)

The published images (φ(P), φ(Q)) on the codomain.

Implementations

impl TorsionImageWitness

pub fn verify(&self) -> bool

Re-check the witness from scratch, trusting nothing about how it was produced:

1. (P, Q) is a genuine basis of E[N] — the Weil pairing e_N(P,Q) is a primitive Nth root of unity (the points are independent, so the pairing is non-degenerate);
2. (φP, φQ) lie on the codomain and are killed by N;
3. the isogeny-compatibility law e_N(φP, φQ) = e_N(P, Q)^{deg φ} holds.

Trait Implementations

impl Clone for TorsionImageWitness

fn clone(&self) -> TorsionImageWitness

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TorsionImageWitness

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.