From Wikipedia:

One of the attractive feature of the Edwards Addition law is that it is strongly unified i.e. it can also be used to double a point, simplifying protection against side-channel attack.

Could you explain with more detail how an explicit doubling can protect against side-channel attacks?

  • 1
    $\begingroup$ I believe the passage was saying that because there is only one formula for both addition and doubling. If you have a constant time addition formula, you also have a constant time doubling formula. The alternative would be that you would need to make sure that both addition and doubling are constant time $\endgroup$ – user679128 Jul 17 at 20:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.