Primality of the Curve1174 characteristic #
Curve1174 of [bernstein2013a], Section 4, is defined over the prime field F_q with
q = 2^251 - 9. This file establishes Nat.Prime q.
The proof runs the Pratt certificate machinery of Elligator.PrimalityCertificate: the
factorisation
q - 1 = 2 * 19 * 3121 * p_6
is completed by recursively certifying the large prime factors p_1, …, p_6, each of which is
again handled by Elligator.PrimalityCertificate.prime_of_pratt. All modular exponentiations are
carried out with powMod, so the numerical side conditions are closed by decide and are
checked by the Lean kernel.
Main results #
q1174_prime:2 ^ 251 - 9is prime.
References #
See [bernstein2013a], Section 4.1.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 7.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 5.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 5.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 2.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 2.
An auxiliary prime occurring in the Pratt certificate for q,
verified by the Pratt certificate with base 6.
The characteristic q = 2 ^ 251 - 9 of the Curve1174 base field is prime,
verified by the Pratt certificate with base 7.