DurationMillis converts a time.Duration to a number of milliseconds.

Err returns the first error encountered by Write, if any.

GeDoubleScalarMultVartime sets r = a*A + b*B where a = a[0]+256*a[1]+...+256^31 a[31]. and b = b[0]+256*b[1]+...+256^31 b[31]. B is the Ed25519 base p

MarshalText satisfies the TextMarshaler interface. It returns the bytes of h encoded in hex, for formats that can't hold arbitrary binary data. It nev

NegateInt64 returns -a with an integer overflow check.

New384 creates a new SHA3-384 hash. Its generic security strength is 384 bits against preimage attacks, and 192 bits against collision attacks.

NewShake128 creates a new SHAKE128 variable-output-length ShakeHash. Its generic security strength is 128 bits against all attacks if at least 32 byte

NonceCommitment returns the byte commitment for the given nonce id and expiration.

NonceHash computes the hash of a nonce tuple.

NonceTuple computes a nonce tuple suitable for logging (with vm.log(nonce...)) or hashing (with NonceHash).

PruneNonces modifies a Snapshot, removing all nonce IDs with expiration times earlier than the provided timestamp.

Public returns the PublicKey corresponding to priv.

Recover performs crash recovery, restoring the blockchain to a complete state. It returns the latest confirmed block and the corresponding state snaps

Runlimit returns the current remaining runlimit in the VM.

ScMul multiplies the EC point x by the scalar y, placing the result in z and returning that. X and z may be the same pointer.

ScMulBase multiplies the ed25519 base point by x and places the result in z, returning that.

SetUint64 sets the scalar to a given integer value. One-liner: s := (&ecmath.Scalar{}).SetUint64(n)

SpendMultisig writes txvm bytecode to b, spending a value previously locked with the standard pay-to-multisig-program contract.

Sum256 uses a ShakeHash from the pool to sum into hash.

Written returns the number of bytes written to the underlying writer.

The initialization of cSHAKE

duplicated from core/key/store.go.

materializeTx materializes the template into txvm bytecode. The resulting program is complete up until op.Finalize. It does not include the transacti

s must be >= 32 bytes long and gets rewritten in place

prevPowerOfTwo returns the largest power of two that is smaller than a given number. In other words, for some input n, the prevPowerOfTwo k is a power

Find any value on the stack, move it to the top, and splitzero it. Returns nil if no value is found.

AfterStep can be passed as an option to Validate. It adds a callback to be invoked after each instruction is executed.

BlockWaiter returns a channel that waits for the block at the given height.

CShakeSum128 writes an arbitrary-length digest of data into hash. n is a customization string for derived functions specified by NIST. Set n to an emp

Code returns the opcode for the given name, or false if name is unknown.

Concat concatenates an already assemble txvm program fragment onto the end of b.

Detail returns the detail message contained in err, if any. An error has a detail message if it was made by WithDetail or WithDetailf.

EmptyTx produces a minimal valid transaction from "nonce" and "finalize". The supplied blockID and exp are for computing the nonce. Some random bytes

FeSquare2 sets h = 2 * f * f Can overlap h with f. Preconditions: |f| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc. Postconditions: |h| b

FromMillis converts a number of milliseconds since 1970 to a time.Time.

GetBlock returns the block at the given height, if there is one, otherwise it returns an error.

Materialize returns the transaction's program and ID. If the transaction ID cannot be computed because the transaction is not finalized or because of

MillisDuration coverts milliseconds to a time.Duration.

NegateInt32 returns -a with an integer overflow check.

NewChain makes a new Chain. By default it uses a memstore for storage and creates an initial block using a 0/0 multisig program. It commits the initia