miximus icon indicating copy to clipboard operation
miximus copied to clipboard

Optimized ecmul on secp256k1

Open k06a opened this issue 5 years ago • 1 comments

Recently Vitalik Buterin proposed to abuse ecrecover to compute hashed result of ecmul: https://ethresear.ch/t/you-can-kinda-abuse-ecrecover-to-do-ecmul-in-secp256k1-today/2384

I had implemented his idea: https://github.com/1Address/ecsol/blob/master/contracts/EC.sol

It uses about 32K gas to call ecmulVerify.

k06a avatar Aug 07 '18 07:08 k06a

I think this cannot be used for snark verification as you need to do pairing additons and multiplications which i don't think is possible with secp256k1

barryWhiteHat avatar Sep 15 '18 13:09 barryWhiteHat