Skip to content

crypto: Precompute Miller-loop lines for G2 generator in KZG verify #1549

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chfast merged 1 commit into from
May 27, 2026
Merged

crypto: Precompute Miller-loop lines for G2 generator in KZG verify #1549

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions lib/evmone_precompiles/CMakeLists.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,6 @@ target_sources(
sha256.cpp
kzg.hpp
kzg.cpp
kzg_setup_g2_1_lines.hpp
kzg_setup_g2_1_lines.cpp
kzg_precomputed_lines.hpp
kzg_precomputed_lines.cpp
)
7 changes: 3 additions & 4 deletions lib/evmone_precompiles/kzg.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
// SPDX-License-Identifier: Apache-2.0

#include "kzg.hpp"
#include "kzg_setup_g2_1_lines.hpp"
#include "kzg_precomputed_lines.hpp"
#include <blst.h>
#include <algorithm>
#include <optional>
Expand Down Expand Up @@ -55,10 +55,9 @@ blst_p1_affine add_or_double(const blst_p1_affine& p, const blst_p1& q) noexcept

bool pairings_verify(const blst_p1_affine& a1, const blst_p1_affine& b1) noexcept
{
// Uses precomputed Miller loop lines for the G2 generator [1]₂.
blst_fp12 left;
// Runs the Miller loop against the G2 generator (no precomputed lines).
// TODO: Precompute lines for G2_GEN and use blst_miller_loop_lines() like the [s]₂ side.
blst_aggregated_in_g1(&left, &a1);
blst_miller_loop_lines(&left, g2_gen_lines(), &a1);
// Uses precomputed Miller loop lines for KZG_SETUP_G2_1 ([s]₂).
blst_fp12 right;
blst_miller_loop_lines(&right, kzg_setup_g2_1_lines(), &b1);
Expand Down
Loading