public-key crypto.

And djb's implementations of Ed25519, Curve25519 use this exact radix 2^51 trick.

Actually on 32-bit it uses a 2^25.5 radix, some are 2^26-bit limbs and others are 2^25.

I was meaning on 64-bit, but it's good to clarify that, thank you.

hn upvotes

Hacker News is a bit too small for that