web3wagmi
← All standards

EIP-2537 Precompile for BLS12-381 curve operations

FinalCorecreated 2020-02-211 later proposal build on it

Adds operation on BLS12-381 curve as a precompile in a set necessary to efficiently perform operations such as BLS signature verification.

Authors: Alex Vlasov (@shamatar), Kelly Olson (@ineffectualproperty), Alex Stokes (@ralexstokes), Antonio Sanso (@asanso)

Built on by (1)

Later proposals that name this one in their requires field.

EIP-7600Hardfork Meta - Pectra

What the specification covers

AbstractMotivationSpecificationConstantsCurve parametersFields and GroupsFine points and encoding of base elementsField elements encoding:Encoding of points in G1/G2:Point of infinity encoding:Encoding of scalars for multiplication operation:Behavior on empty inputs:ABI for operationsABI for G1 additionABI for G1 MSMABI for G2 additionABI for G2 MSMABI for pairing checkABI for mapping Fp element to G1 pointABI for mapping Fp2 element to G2 pointGas burning on errorDDoS protectionGas scheduleG1 additionG1 multiplicationG2 additionG2 multiplicationG1/G2 MSMG1 discountsG2 discountsPairing check operationFp-to-G1 mapping operationFp2-to-G2 mapping operationGas schedule clarifications for the variable-length inputGas schedule clarifications for G1/G2 MSMGas schedule clarifications for pairingRationaleMSM as a separate callNo dedicated MUL callBackwards CompatibilitySubgroup checksField to curve mappingTest CasesBenchmarking test casesReference ImplementationSecurity ConsiderationsCopyright

This proposal declares no Solidity interface, so there is nothing to compute. It may be a core protocol change, a meta proposal, or written in prose only.

Compare with

Parsed from the canonical specification · discussion