feat: added HashToG2 and BLS G2 signature verification circuit for BLS12-381 #1024
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This PR implemented circuit for
HashToG2
and BLS G2 signature verification for the BLS12-381 curve. The implementation is based on affine coordinations.Along with the said functionalities, it also added
G2.addUnified(p, q)
function which can handle the case thatp == q
. And as an optimization, it also adopted a new hint to calculate thesqrtRatio
function with the gnark-crypto library to save constraints. Therefore this PR depends on an update to gnark-cryptoFixes # (issue)
#648
Type of change
How has this been tested?
Added unit tests to cover:
How has this been benchmarked?
Added test cases for HashToG2. Results: 2761896 constraints with SCS and 779198 with R1CS for simple message ("abcd").
Checklist:
golangci-lint
does not output errors locally