Daira-Emma Hopwood

https://github.com/arkworks-rs/algebra/issues/274 will be needed in order to support Pluto's pairing.

The statefulness is actually a pain. Typically, what you want to do is mark a particular revision and then compare the current state to that revision as you make changes....

If I had to guess by extrapolation from BLS12-381, I'd guess that a k-extension uses the irreducible polynomial uk - `NONRESIDUE`. Is that right? More explanation would definitely be good!...

This is blocking my implementation of Pluto and Triton in arkworks-rs/curves#54. The documentation needed is of how the constants such as `NONRESIDUE` and `QUADRATIC_NONRESIDUE` correspond to the usual description of...

See https://trac.sagemath.org/ticket/31686 for factoring pn - 1. Summary: yes it is easy in the cases likely to arise in Arkworks, using the code at https://trac.sagemath.org/ticket/31686#comment:7 .

Please consider using the `zkcrypto/group` and `zkcrypto/ff` crates (the latter probably without the "derive" feature), if Arkworks' group APIs are going to change. These crates are pretty stable now (despite...

@hdevalence That's why I only suggested switching to it in the case that Arkworks' APIs were going to change in order to make essentially the same `PrimeGroup`/`CofactorGroup` distinction that the...

The table-based variant does need precomputation, yes.

The current square root implementation (https://github.com/arkworks-rs/algebra/blob/master/ff/src/fields/arithmetic.rs#L225-L280) could be improved in two ways that are orthogonal to the improvements in the new algorithm: * The powering by (m-1)/2 can be done...

Have you considered depending on the `group` and `pairing` crates? That would really help with interoperability (e.g. I believe it would mean that `bellman` could use curves defined by Arkworks)....