algebra icon indicating copy to clipboard operation
algebra copied to clipboard

Hash to G1 point setting different domain string

Open vincenzoiovino opened this issue 1 year ago • 2 comments

Hello, I need the following. I need to hash to G1 for the BLS12-381 curve using the standard IRTF but with the domain string of G2 rather than G1. This is because drand has a bug in the implementation: in the hash to G1 use the domain string of G2 . I could not find how I can modify the domain string programmatically in arkworks. Any hint?

vincenzoiovino avatar Jun 19 '23 07:06 vincenzoiovino

https://github.com/darwinia-network/darwinia/blob/main/precompile/bls12-381/src/bls/mod.rs#L95-L102

This uses case might help you.

hujw77 avatar Jul 05 '23 06:07 hujw77

We need to open up the hash-to-curve anyweays because the IRTF draft permits user specified xofs, everyone hates the sha2 xmd, some curves require other xofs, and our code currently does not support any other xof. I started some PRs for this, but got distracted.

burdges avatar Dec 19 '23 11:12 burdges