Kobi Gurkan

I think that would be a welcome change, although not an urgent one. Also, does element need the `RHS` type? Can we use `Self` directly instead? One other comment -...

Ah, right! Of course Element needs a type parameter. Then I'm curious about the choice of having a default of Self :)

I used w/e @nikkolasg introduced to the repo. I'm committing a makefile with cross compilation tools soon that you can try out :)

@dignifiedquire check out https://github.com/celo-org/celo-threshold-bls-rs/pull/16. You can enable bls12-381 in the Makefile and see the error.

Some of these are avenues that definitely can be explored. About reducing the number of constraints: we use some methods that are possibly safer, though come at a cost -...

> Looking into Rust implementations, @jon-chuang has done great optimizations to Zexe those past months, for example this one [scipr-lab/zexe#296](https://github.com/scipr-lab/zexe/pull/296). > > I expect Zexe is currently the fastest Rust...

Will Blake2b work for this case? It allows 1024 bit inputs and also available on the EVM. Porting the Blake2s to Blake2b isn't too hard.

Yeah, the main difference is that it works on 512-bit inputs, not that it has less security. You're right that the precompile is only the compression function, though I'd expected...

> Unfortunately thats not how the key refresh protocol from the Canetti paper works. If you want to change membership you need to generate an entirely new address with the...

@HarryR I don't mind changing it to match the description, though it seems that it might not be necessary. @byt3bit By "not doing the swap in the last round", it...