On Tue, Jan 15, 2019 at 1:10 AM Trevor Perrin <trevp at trevp.net> wrote: > > Mike wrote up a SPAKE2 "Elligator Edition" a few years ago: > > https://moderncrypto.org/mail-archive/curves/2015/000424.html Oh, and here's yet another explanation of Elligator2: https://signal.org/docs/specifications/xeddsa/#hashing-to-a-point-with-elligator-2 Trevor