crypto/bn256: refine comments according to #19577, #21595, and #21836 (#21847)

This commit is contained in:
Sad Pencil
2020-11-17 16:51:36 +08:00
committed by GitHub
parent 92c56eb820
commit 1ea7537997
3 changed files with 12 additions and 4 deletions

View File

@ -9,8 +9,13 @@
//
// This package specifically implements the Optimal Ate pairing over a 256-bit
// Barreto-Naehrig curve as described in
// http://cryptojedi.org/papers/dclxvi-20100714.pdf. Its output is compatible
// with the implementation described in that paper.
// http://cryptojedi.org/papers/dclxvi-20100714.pdf. Its output is not
// compatible with the implementation described in that paper, as different
// parameters are chosen.
//
// (This package previously claimed to operate at a 128-bit security level.
// However, recent improvements in attacks mean that is no longer true. See
// https://moderncrypto.org/mail-archive/curves/2016/000740.html.)
package bn256
import (