#!/usr/local/bin/raku
unit module secp256k1;

our constant p = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F;

constant b = 7;
constant a = 0;

CHECK {
  die "p is not prime" unless p.is-prime;
  die "p needs to be congruent to 3 modulo 4" unless p - 3 %% 4;
}

class Point is export {

  

  Implemention using Jacobian coordinates was taken from Wikibooks:
  L<https://en.wikibooks.org/wiki/Cryptography/Prime_Curve/Jacobian_Coordinates>


CREDITS


  has Int ($.x, $.y, $.z, $.order);
  submethod TWEAK {
    use FiniteField; my $*modulus = p;
    unless self.y**2 == self.x**3 + a*self.x + b {
      die "point is not on the curve (x is {self.x}, y² is {self.y**2 mod p})";
    }
  }
  method jacobian-coordinates { $!x, $!y, $!z }
  method xy { self.x, self.y }
  method WHICH { self.xy.join: '|' }
  multi method new(Int:D $x, Int:D $y, Int :$order?) {
    samewith :$x, :$y, :z(1), :$order
  }
  multi method new(Blob $b where $b.elems == 33 && $b[0] == 2|3) {
    my $x = $b.subbuf(1).list.reduce: 256 * * + *;
    my $y2 = {
      use FiniteField; my $*modulus = p;
      $x**3 + a*$x + b;
    }();
    # L<https://www.rieselprime.de/ziki/Modular_square_root>
    # In order to compute the square root, we will consider different cases,
    # depending on the modulus. When this modulus is odd, we assume that the
    # quantity expmod(a, (m-1) div 2, m) equals 1 (otherwise there is no square
    # root if a ≠ 0 mod m).
    die "Point of abcissa $x can't be on the curve" if expmod($y2, (p-1) div 2, p) !== 1;
    # when m ≡ 3 [mod 4], sqrt = expmod(a, (m - 3) div 4, m)
    my $y = expmod($y2, (p - 3) div 4, p);
    $y = p - $y if $y %% 2 && $b[0] == 3;
    samewith :$x, :$y, :z(1)
  }
  multi method gist(::?CLASS:D:) { "EC Point at x=$.x, y=$.y" }
  multi method gist(::?CLASS:U:) { "point at horizon" }
  multi method Blob { blob8.new: ($.y %% 2 ?? 2 !! 3), $.x.polymod(256 xx 31).reverse }
  multi method Blob(:$uncompressed where ?*) {
    blob8.new: 0x04, ($.x, $.y).map: *.polymod(256 xx 31).reverse
  }
  method Str { "secp256k1::" ~ self.Blob».fmt("%02X").join }

  method x { use FiniteField; my $*modulus = p; $!x/$!z**2 }
  method y { use FiniteField; my $*modulus = p; $!y/$!z**3 }
  method double(--> ::?CLASS) {
    use FiniteField; my $*modulus = p;
    return ::?CLASS if $!y == 0;
    my $s = 4*$!x*$!y**2;
    my $m = 3*$!x**2 + a*$!z**4;
    my $x = $m**2 - 2*$s;
    my $y = $m*($s - $x) - 8*$!y**4;
    my $z = 2*$!y*$!z;
    return self.new: :$x, :$y, :$z;
  }

  method add(::?CLASS $p --> ::?CLASS) {
    use FiniteField; my $*modulus = p;
    my (\X1, \Y1, \Z1) = self.jacobian-coordinates;
    my (\X2, \Y2, \Z2) = $p  .jacobian-coordinates;
    my (\U1, \U2) = X1*Z2**2, X2*Z1**2;
    my (\S1, \S2) = Y1*Z2**3, Y2*Z1**3;
    if U1 == U2 {
      if S1 !== S2 { return ::?CLASS }
      else         { return self.double }
    }
    my \H = U2 - U1;
    my $R = S2 - S1;
    my $x = my \X3 = $R**2 - H**3 - 2*U1*H**2;
    my $y = my \Y3 = $R*(U1*H**2 - X3) - S1*H**3;
    my $z = my \Z3 = H*Z1*Z2;
    return self.new: :$x, :$y, :$z;
  }
}

our constant G is export = Point.new:
  0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798,
  0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8,
  :order(0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141);

multi infix:<*>(1, Point:D $point) is export { $point        }
multi infix:<*>(2, Point:D $point) is export { $point.double }

multi sub infix:<eqv>(Point $a, Point $b) returns Bool is export { $a.x == $b.x && $a.y == $b.y }
multi sub prefix:<->(Point:U) { Point }
multi sub prefix:<->(Point:D $point) {
    Point.new: :x($point.x), :y(-$point.y), :order($point.order);
}
multi infix:<->(Point $a, Point $b) { $a + -$b }

multi infix:<+>(Point:U, Point $b)   is export { $b }
multi infix:<+>(Point:D $a, Point:U) is export { $a }
multi infix:<+>(Point:D $a, Point:D $b) is export { $a.add: $b }

multi infix:<*>(Point $u, Int $n) is export { $n * $u }
multi infix:<*>(Int $n, Point:U) is export { Point }
multi infix:<*>(0, Point)          is export { Point }
multi infix:<*>(1, Point:D $point) is export { $point }

multi infix:<*>(Int $n where 1 < $n < 2**256, G) is export {
  [+] $n.polymod(2 xx *) Z* BEGIN (G, 2 * * ... *)[^256]
}
multi infix:<*>(Int $n where 1 < $n < 2**256, Point:D $point) is export {
  ($n div 2) * $point.double + ($n mod 2) * $point
}

# vi: ft=raku


root

README

React

=begin React :component<HeaderCol> :id<menu> 
=para L<Documentation|/doc/introduction>
=para L<Modules| /mods>
=para L<Examples| file:../examples/index.podlite>
=para L<Download |file:../download/index.podlite>
=para L<About|file:../about/index.podlite>
=para 🔍 K<⌘K>/K<ctrl-K>
=end React


=begin React :component<HeaderCol> :id<footer>  
=begin nested :!nested
=item1 B<Language>
    =item2 L<Get started|file:../getting-started/getting-started.podlite>
    =item2 L<Why Raku?|/doc/language/faq#Why-should-I-learn-Raku-What's-so-great-about-it>
    =item2 L<Try Raku|https://glot.io/new/raku>
    =item2 L<Raku cheat sheet|https://github.com/Raku/mu/blob/master/docs/Perl6/Cheatsheet/cheatsheet.txt>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<Raku on Exercism|https://exercism.org/tracks/raku>
    =item2 L<Wikipedia|https://en.wikipedia.org/wiki/Raku_(programming_language)>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>

=end nested
=begin nested :!nested

=item1 B<L<Documentation|/doc>>
    =item2 L<Getting started, Migration guides from other languages, & Tutorials | file:../doc/introduction.podlite>
    =item2 L<Language References|file:../doc/reference.podlite>
    =item2 L<Type Reference| file:../doc/types.podlite>
    =item2 L<Miscellaneous| file:../doc/miscellaneous.podlite>
    =item2 L<FAQs (Frequently Asked Questions)|/doc/language/faq>
    =item2 L<Community|/doc/language/community>
    =item2 L<The list of all documents|file:../doc/index.podlite>

=item1 B<Resources>
    =item2 L<The Raku Guide|https://raku.guide/>
    =item2 L<Books |https://perl6book.com/>
    =item2 L<Rosetta Code | https://www.raku.org/community/rosettacode>

=end nested
=begin nested :!nested

=item1 B<Resoures>
    =item2 L<Download | file:../download/index.podlite>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>

=item1 B<Learning>
    =item2 L<The Raku Guide|https://raku.guide/>
    =item2 L<Wikibook |https://en.wikibooks.org/wiki/Raku_Programming>
    =item2 L<Books |https://perl6book.com/>
    =item2 L<Rosetta Code | https://www.raku.org/community/rosettacode>
    =item2 L<Learn Raku in Y minutes|https://learnxinyminutes.com/docs/raku/>
    =item2 L<Golfing |https://github.com/AlexDaniel/raku-golf-cheatsheet>
=end nested
=begin nested :!nested

=item1 B<Explore>
    =item2 L<Raku Blog Aggregator|https://planet.raku.org/>
    =item2 L<Rakudo Weekly|https://rakudoweekly.blog/>
    =item2 L<The Weekly Challenge |https://perlweeklychallenge.org/>
    =item2 L<Raku Advent Calendar|https://raku-advent.blog/>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>
    =item2 L<empty|#>

=end nested
=end React


=begin React :component<CookieConsent> :id<CookieConsent> :buttonCaption("Got it!")
=para
This website uses cookies for analytics.
=end React
