monty.rs.html 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257
  1. <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="Source to the Rust file `/Users/travis/.cargo/registry/src/github.com-1ecc6299db9ec823/num-bigint-0.1.44/src/monty.rs`."><meta name="keywords" content="rust, rustlang, rust-lang"><title>monty.rs.html -- source</title><link rel="stylesheet" type="text/css" href="../../normalize.css"><link rel="stylesheet" type="text/css" href="../../rustdoc.css" id="mainThemeStyle"><link rel="stylesheet" type="text/css" href="../../dark.css"><link rel="stylesheet" type="text/css" href="../../light.css" id="themeStyle"><script src="../../storage.js"></script></head><body class="rustdoc source"><!--[if lte IE 8]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><nav class="sidebar"><div class="sidebar-menu">&#9776;</div></nav><div class="theme-picker"><button id="theme-picker" aria-label="Pick another theme!"><img src="../../brush.svg" width="18" alt="Pick another theme!"></button><div id="theme-choices"></div></div><script src="../../theme.js"></script><nav class="sub"><form class="search-form js-only"><div class="search-container"><input class="search-input" name="search" autocomplete="off" placeholder="Click or press ‘S’ to search, ‘?’ for more options…" type="search"><a id="settings-menu" href="../../settings.html"><img src="../../wheel.svg" width="18" alt="Change settings"></a></div></form></nav><section id="main" class="content"><pre class="line-numbers"><span id="1"> 1</span>
  2. <span id="2"> 2</span>
  3. <span id="3"> 3</span>
  4. <span id="4"> 4</span>
  5. <span id="5"> 5</span>
  6. <span id="6"> 6</span>
  7. <span id="7"> 7</span>
  8. <span id="8"> 8</span>
  9. <span id="9"> 9</span>
  10. <span id="10"> 10</span>
  11. <span id="11"> 11</span>
  12. <span id="12"> 12</span>
  13. <span id="13"> 13</span>
  14. <span id="14"> 14</span>
  15. <span id="15"> 15</span>
  16. <span id="16"> 16</span>
  17. <span id="17"> 17</span>
  18. <span id="18"> 18</span>
  19. <span id="19"> 19</span>
  20. <span id="20"> 20</span>
  21. <span id="21"> 21</span>
  22. <span id="22"> 22</span>
  23. <span id="23"> 23</span>
  24. <span id="24"> 24</span>
  25. <span id="25"> 25</span>
  26. <span id="26"> 26</span>
  27. <span id="27"> 27</span>
  28. <span id="28"> 28</span>
  29. <span id="29"> 29</span>
  30. <span id="30"> 30</span>
  31. <span id="31"> 31</span>
  32. <span id="32"> 32</span>
  33. <span id="33"> 33</span>
  34. <span id="34"> 34</span>
  35. <span id="35"> 35</span>
  36. <span id="36"> 36</span>
  37. <span id="37"> 37</span>
  38. <span id="38"> 38</span>
  39. <span id="39"> 39</span>
  40. <span id="40"> 40</span>
  41. <span id="41"> 41</span>
  42. <span id="42"> 42</span>
  43. <span id="43"> 43</span>
  44. <span id="44"> 44</span>
  45. <span id="45"> 45</span>
  46. <span id="46"> 46</span>
  47. <span id="47"> 47</span>
  48. <span id="48"> 48</span>
  49. <span id="49"> 49</span>
  50. <span id="50"> 50</span>
  51. <span id="51"> 51</span>
  52. <span id="52"> 52</span>
  53. <span id="53"> 53</span>
  54. <span id="54"> 54</span>
  55. <span id="55"> 55</span>
  56. <span id="56"> 56</span>
  57. <span id="57"> 57</span>
  58. <span id="58"> 58</span>
  59. <span id="59"> 59</span>
  60. <span id="60"> 60</span>
  61. <span id="61"> 61</span>
  62. <span id="62"> 62</span>
  63. <span id="63"> 63</span>
  64. <span id="64"> 64</span>
  65. <span id="65"> 65</span>
  66. <span id="66"> 66</span>
  67. <span id="67"> 67</span>
  68. <span id="68"> 68</span>
  69. <span id="69"> 69</span>
  70. <span id="70"> 70</span>
  71. <span id="71"> 71</span>
  72. <span id="72"> 72</span>
  73. <span id="73"> 73</span>
  74. <span id="74"> 74</span>
  75. <span id="75"> 75</span>
  76. <span id="76"> 76</span>
  77. <span id="77"> 77</span>
  78. <span id="78"> 78</span>
  79. <span id="79"> 79</span>
  80. <span id="80"> 80</span>
  81. <span id="81"> 81</span>
  82. <span id="82"> 82</span>
  83. <span id="83"> 83</span>
  84. <span id="84"> 84</span>
  85. <span id="85"> 85</span>
  86. <span id="86"> 86</span>
  87. <span id="87"> 87</span>
  88. <span id="88"> 88</span>
  89. <span id="89"> 89</span>
  90. <span id="90"> 90</span>
  91. <span id="91"> 91</span>
  92. <span id="92"> 92</span>
  93. <span id="93"> 93</span>
  94. <span id="94"> 94</span>
  95. <span id="95"> 95</span>
  96. <span id="96"> 96</span>
  97. <span id="97"> 97</span>
  98. <span id="98"> 98</span>
  99. <span id="99"> 99</span>
  100. <span id="100">100</span>
  101. <span id="101">101</span>
  102. <span id="102">102</span>
  103. <span id="103">103</span>
  104. <span id="104">104</span>
  105. <span id="105">105</span>
  106. <span id="106">106</span>
  107. <span id="107">107</span>
  108. <span id="108">108</span>
  109. <span id="109">109</span>
  110. <span id="110">110</span>
  111. <span id="111">111</span>
  112. <span id="112">112</span>
  113. <span id="113">113</span>
  114. <span id="114">114</span>
  115. <span id="115">115</span>
  116. <span id="116">116</span>
  117. <span id="117">117</span>
  118. <span id="118">118</span>
  119. <span id="119">119</span>
  120. <span id="120">120</span>
  121. <span id="121">121</span>
  122. <span id="122">122</span>
  123. <span id="123">123</span>
  124. <span id="124">124</span>
  125. <span id="125">125</span>
  126. <span id="126">126</span>
  127. <span id="127">127</span>
  128. </pre><pre class="rust ">
  129. <span class="kw">use</span> <span class="ident">integer</span>::<span class="ident">Integer</span>;
  130. <span class="kw">use</span> <span class="ident">traits</span>::<span class="ident">Zero</span>;
  131. <span class="kw">use</span> <span class="ident">biguint</span>::<span class="ident">BigUint</span>;
  132. <span class="kw">struct</span> <span class="ident">MontyReducer</span><span class="op">&lt;</span><span class="lifetime">&#39;a</span><span class="op">&gt;</span> {
  133. <span class="ident">n</span>: <span class="kw-2">&amp;</span><span class="lifetime">&#39;a</span> <span class="ident">BigUint</span>,
  134. <span class="ident">n0inv</span>: <span class="ident">u32</span>
  135. }
  136. <span class="comment">// Calculate the modular inverse of `num`, using Extended GCD.</span>
  137. <span class="comment">//</span>
  138. <span class="comment">// Reference:</span>
  139. <span class="comment">// Brent &amp; Zimmermann, Modern Computer Arithmetic, v0.5.9, Algorithm 1.20</span>
  140. <span class="kw">fn</span> <span class="ident">inv_mod_u32</span>(<span class="ident">num</span>: <span class="ident">u32</span>) <span class="op">-&gt;</span> <span class="ident">u32</span> {
  141. <span class="comment">// num needs to be relatively prime to 2**32 -- i.e. it must be odd.</span>
  142. <span class="macro">assert</span><span class="macro">!</span>(<span class="ident">num</span> <span class="op">%</span> <span class="number">2</span> <span class="op">!=</span> <span class="number">0</span>);
  143. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">a</span>: <span class="ident">i64</span> <span class="op">=</span> <span class="ident">num</span> <span class="kw">as</span> <span class="ident">i64</span>;
  144. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">b</span>: <span class="ident">i64</span> <span class="op">=</span> (<span class="ident">u32</span>::<span class="ident">max_value</span>() <span class="kw">as</span> <span class="ident">i64</span>) <span class="op">+</span> <span class="number">1</span>;
  145. <span class="comment">// ExtendedGcd</span>
  146. <span class="comment">// Input: positive integers a and b</span>
  147. <span class="comment">// Output: integers (g, u, v) such that g = gcd(a, b) = ua + vb</span>
  148. <span class="comment">// As we don&#39;t need v for modular inverse, we don&#39;t calculate it.</span>
  149. <span class="comment">// 1: (u, w) &lt;- (1, 0)</span>
  150. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">u</span> <span class="op">=</span> <span class="number">1</span>;
  151. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">w</span> <span class="op">=</span> <span class="number">0</span>;
  152. <span class="comment">// 3: while b != 0</span>
  153. <span class="kw">while</span> <span class="ident">b</span> <span class="op">!=</span> <span class="number">0</span> {
  154. <span class="comment">// 4: (q, r) &lt;- DivRem(a, b)</span>
  155. <span class="kw">let</span> <span class="ident">q</span> <span class="op">=</span> <span class="ident">a</span> <span class="op">/</span> <span class="ident">b</span>;
  156. <span class="kw">let</span> <span class="ident">r</span> <span class="op">=</span> <span class="ident">a</span> <span class="op">%</span> <span class="ident">b</span>;
  157. <span class="comment">// 5: (a, b) &lt;- (b, r)</span>
  158. <span class="ident">a</span> <span class="op">=</span> <span class="ident">b</span>; <span class="ident">b</span> <span class="op">=</span> <span class="ident">r</span>;
  159. <span class="comment">// 6: (u, w) &lt;- (w, u - qw)</span>
  160. <span class="kw">let</span> <span class="ident">m</span> <span class="op">=</span> <span class="ident">u</span> <span class="op">-</span> <span class="ident">w</span><span class="kw-2">*</span><span class="ident">q</span>;
  161. <span class="ident">u</span> <span class="op">=</span> <span class="ident">w</span>; <span class="ident">w</span> <span class="op">=</span> <span class="ident">m</span>;
  162. }
  163. <span class="macro">assert</span><span class="macro">!</span>(<span class="ident">a</span> <span class="op">==</span> <span class="number">1</span>);
  164. <span class="comment">// Downcasting acts like a mod 2^32 too.</span>
  165. <span class="ident">u</span> <span class="kw">as</span> <span class="ident">u32</span>
  166. }
  167. <span class="kw">impl</span><span class="op">&lt;</span><span class="lifetime">&#39;a</span><span class="op">&gt;</span> <span class="ident">MontyReducer</span><span class="op">&lt;</span><span class="lifetime">&#39;a</span><span class="op">&gt;</span> {
  168. <span class="kw">fn</span> <span class="ident">new</span>(<span class="ident">n</span>: <span class="kw-2">&amp;</span><span class="lifetime">&#39;a</span> <span class="ident">BigUint</span>) <span class="op">-&gt;</span> <span class="self">Self</span> {
  169. <span class="kw">let</span> <span class="ident">n0inv</span> <span class="op">=</span> <span class="ident">inv_mod_u32</span>(<span class="ident">n</span>.<span class="ident">data</span>[<span class="number">0</span>]);
  170. <span class="ident">MontyReducer</span> { <span class="ident">n</span>: <span class="ident">n</span>, <span class="ident">n0inv</span>: <span class="ident">n0inv</span> }
  171. }
  172. }
  173. <span class="comment">// Montgomery Reduction</span>
  174. <span class="comment">//</span>
  175. <span class="comment">// Reference:</span>
  176. <span class="comment">// Brent &amp; Zimmermann, Modern Computer Arithmetic, v0.5.9, Algorithm 2.6</span>
  177. <span class="kw">fn</span> <span class="ident">monty_redc</span>(<span class="ident">a</span>: <span class="ident">BigUint</span>, <span class="ident">mr</span>: <span class="kw-2">&amp;</span><span class="ident">MontyReducer</span>) <span class="op">-&gt;</span> <span class="ident">BigUint</span> {
  178. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">c</span> <span class="op">=</span> <span class="ident">a</span>.<span class="ident">data</span>;
  179. <span class="kw">let</span> <span class="ident">n</span> <span class="op">=</span> <span class="kw-2">&amp;</span><span class="ident">mr</span>.<span class="ident">n</span>.<span class="ident">data</span>;
  180. <span class="kw">let</span> <span class="ident">n_size</span> <span class="op">=</span> <span class="ident">n</span>.<span class="ident">len</span>();
  181. <span class="comment">// Allocate sufficient work space</span>
  182. <span class="ident">c</span>.<span class="ident">resize</span>(<span class="number">2</span> <span class="op">*</span> <span class="ident">n_size</span> <span class="op">+</span> <span class="number">2</span>, <span class="number">0</span>);
  183. <span class="comment">// β is the size of a word, in this case 32 bits. So &quot;a mod β&quot; is</span>
  184. <span class="comment">// equivalent to masking a to 32 bits.</span>
  185. <span class="comment">// mu &lt;- -N^(-1) mod β</span>
  186. <span class="kw">let</span> <span class="ident">mu</span> <span class="op">=</span> <span class="number">0u32</span>.<span class="ident">wrapping_sub</span>(<span class="ident">mr</span>.<span class="ident">n0inv</span>);
  187. <span class="comment">// 1: for i = 0 to (n-1)</span>
  188. <span class="kw">for</span> <span class="ident">i</span> <span class="kw">in</span> <span class="number">0</span>..<span class="ident">n_size</span> {
  189. <span class="comment">// 2: q_i &lt;- mu*c_i mod β</span>
  190. <span class="kw">let</span> <span class="ident">q_i</span> <span class="op">=</span> <span class="ident">c</span>[<span class="ident">i</span>].<span class="ident">wrapping_mul</span>(<span class="ident">mu</span>);
  191. <span class="comment">// 3: C &lt;- C + q_i * N * β^i</span>
  192. <span class="kw">super</span>::<span class="ident">algorithms</span>::<span class="ident">mac_digit</span>(<span class="kw-2">&amp;</span><span class="kw-2">mut</span> <span class="ident">c</span>[<span class="ident">i</span>..], <span class="ident">n</span>, <span class="ident">q_i</span>);
  193. }
  194. <span class="comment">// 4: R &lt;- C * β^(-n)</span>
  195. <span class="comment">// This is an n-word bitshift, equivalent to skipping n words.</span>
  196. <span class="kw">let</span> <span class="ident">ret</span> <span class="op">=</span> <span class="ident">BigUint</span>::<span class="ident">new</span>(<span class="ident">c</span>[<span class="ident">n_size</span>..].<span class="ident">to_vec</span>());
  197. <span class="comment">// 5: if R &gt;= β^n then return R-N else return R.</span>
  198. <span class="kw">if</span> <span class="kw-2">&amp;</span><span class="ident">ret</span> <span class="op">&lt;</span> <span class="ident">mr</span>.<span class="ident">n</span> {
  199. <span class="ident">ret</span>
  200. } <span class="kw">else</span> {
  201. <span class="ident">ret</span> <span class="op">-</span> <span class="ident">mr</span>.<span class="ident">n</span>
  202. }
  203. }
  204. <span class="comment">// Montgomery Multiplication</span>
  205. <span class="kw">fn</span> <span class="ident">monty_mult</span>(<span class="ident">a</span>: <span class="ident">BigUint</span>, <span class="ident">b</span>: <span class="kw-2">&amp;</span><span class="ident">BigUint</span>, <span class="ident">mr</span>: <span class="kw-2">&amp;</span><span class="ident">MontyReducer</span>) <span class="op">-&gt;</span> <span class="ident">BigUint</span> {
  206. <span class="ident">monty_redc</span>(<span class="ident">a</span> <span class="op">*</span> <span class="ident">b</span>, <span class="ident">mr</span>)
  207. }
  208. <span class="comment">// Montgomery Squaring</span>
  209. <span class="kw">fn</span> <span class="ident">monty_sqr</span>(<span class="ident">a</span>: <span class="ident">BigUint</span>, <span class="ident">mr</span>: <span class="kw-2">&amp;</span><span class="ident">MontyReducer</span>) <span class="op">-&gt;</span> <span class="ident">BigUint</span> {
  210. <span class="comment">// TODO: Replace with an optimised squaring function</span>
  211. <span class="ident">monty_redc</span>(<span class="kw-2">&amp;</span><span class="ident">a</span> <span class="op">*</span> <span class="kw-2">&amp;</span><span class="ident">a</span>, <span class="ident">mr</span>)
  212. }
  213. <span class="kw">pub</span> <span class="kw">fn</span> <span class="ident">monty_modpow</span>(<span class="ident">a</span>: <span class="kw-2">&amp;</span><span class="ident">BigUint</span>, <span class="ident">exp</span>: <span class="kw-2">&amp;</span><span class="ident">BigUint</span>, <span class="ident">modulus</span>: <span class="kw-2">&amp;</span><span class="ident">BigUint</span>) <span class="op">-&gt;</span> <span class="ident">BigUint</span>{
  214. <span class="kw">let</span> <span class="ident">mr</span> <span class="op">=</span> <span class="ident">MontyReducer</span>::<span class="ident">new</span>(<span class="ident">modulus</span>);
  215. <span class="comment">// Calculate the Montgomery parameter</span>
  216. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">v</span> <span class="op">=</span> <span class="macro">vec</span><span class="macro">!</span>[<span class="number">0</span>; <span class="ident">modulus</span>.<span class="ident">data</span>.<span class="ident">len</span>()];
  217. <span class="ident">v</span>.<span class="ident">push</span>(<span class="number">1</span>);
  218. <span class="kw">let</span> <span class="ident">r</span> <span class="op">=</span> <span class="ident">BigUint</span>::<span class="ident">new</span>(<span class="ident">v</span>);
  219. <span class="comment">// Map the base to the Montgomery domain</span>
  220. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">apri</span> <span class="op">=</span> <span class="ident">a</span> <span class="op">*</span> <span class="kw-2">&amp;</span><span class="ident">r</span> <span class="op">%</span> <span class="ident">modulus</span>;
  221. <span class="comment">// Binary exponentiation</span>
  222. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">ans</span> <span class="op">=</span> <span class="kw-2">&amp;</span><span class="ident">r</span> <span class="op">%</span> <span class="ident">modulus</span>;
  223. <span class="kw">let</span> <span class="kw-2">mut</span> <span class="ident">e</span> <span class="op">=</span> <span class="ident">exp</span>.<span class="ident">clone</span>();
  224. <span class="kw">while</span> <span class="op">!</span><span class="ident">e</span>.<span class="ident">is_zero</span>() {
  225. <span class="kw">if</span> <span class="ident">e</span>.<span class="ident">is_odd</span>() {
  226. <span class="ident">ans</span> <span class="op">=</span> <span class="ident">monty_mult</span>(<span class="ident">ans</span>, <span class="kw-2">&amp;</span><span class="ident">apri</span>, <span class="kw-2">&amp;</span><span class="ident">mr</span>);
  227. }
  228. <span class="ident">apri</span> <span class="op">=</span> <span class="ident">monty_sqr</span>(<span class="ident">apri</span>, <span class="kw-2">&amp;</span><span class="ident">mr</span>);
  229. <span class="ident">e</span> <span class="op">=</span> <span class="ident">e</span> <span class="op">&gt;&gt;</span> <span class="number">1</span>;
  230. }
  231. <span class="comment">// Map the result back to the residues domain</span>
  232. <span class="ident">monty_redc</span>(<span class="ident">ans</span>, <span class="kw-2">&amp;</span><span class="ident">mr</span>)
  233. }
  234. </pre>
  235. </section><section id="search" class="content hidden"></section><section class="footer"></section><aside id="help" class="hidden"><div><h1 class="hidden">Help</h1><div class="shortcuts"><h2>Keyboard Shortcuts</h2><dl><dt><kbd>?</kbd></dt><dd>Show this help dialog</dd><dt><kbd>S</kbd></dt><dd>Focus the search field</dd><dt><kbd>↑</kbd></dt><dd>Move up in search results</dd><dt><kbd>↓</kbd></dt><dd>Move down in search results</dd><dt><kbd>↹</kbd></dt><dd>Switch tab</dd><dt><kbd>&#9166;</kbd></dt><dd>Go to active search result</dd><dt><kbd>+</kbd></dt><dd>Expand all sections</dd><dt><kbd>-</kbd></dt><dd>Collapse all sections</dd></dl></div><div class="infos"><h2>Search Tricks</h2><p>Prefix searches with a type followed by a colon (e.g. <code>fn:</code>) to restrict the search to a given type.</p><p>Accepted types are: <code>fn</code>, <code>mod</code>, <code>struct</code>, <code>enum</code>, <code>trait</code>, <code>type</code>, <code>macro</code>, and <code>const</code>.</p><p>Search functions by type signature (e.g. <code>vec -> usize</code> or <code>* -> vec</code>)</p><p>Search multiple things at once by splitting your query with comma (e.g. <code>str,u8</code> or <code>String,struct:Vec,test</code>)</p></div></div></aside><script>window.rootPath = "../../";window.currentCrate = "num_bigint";</script><script src="../../aliases.js"></script><script src="../../main.js"></script><script defer src="../../search-index.js"></script></body></html>