Struct Bn254

pub struct Bn254;

Implementations

impl Bn254

pub const FROBENIUS_COEFF_FQ6_C1: [Fp2; 3] = _

pub const XI_TO_Q_MINUS_1_OVER_2: Fp2 = _

Trait Implementations

impl IntrinsicCurve for Bn254

type Scalar = Bn254Scalar

type Point = Bn254G1Affine

fn msm(coeffs: &[Self::Scalar], bases: &[Self::Point]) -> Self::Point

where for<'a> &'a Self::Point: Add<&'a Self::Point, Output = Self::Point>,

Multi-scalar multiplication. The implementation may be specialized to use properties of the curve (e.g., if the curve order is prime).

impl LineMulDType<Bn254Fp2, SexticExtField<Bn254Fp2>> for Bn254

fn mul_013_by_013(l0: &EvaluatedLine<Fp2>, l1: &EvaluatedLine<Fp2>) -> [Fp2; 5]

Multiplies two lines in 013-form to get an element in 01234-form

fn mul_by_013(f: &Fp12, l: &EvaluatedLine<Fp2>) -> Fp12

Multiplies a line in 013-form with a Fp12 element to get an Fp12 element

fn mul_by_01234(f: &Fp12, x: &[Fp2; 5]) -> Fp12

Multiplies a line in 01234-form with a Fp12 element to get an Fp12 element

impl MultiMillerLoop for Bn254

const SEED_ABS: u64 = 4_965_661_367_192_848_881u64

const PSEUDO_BINARY_ENCODING: &[i8] = _

type Fp = Bn254Fp

type Fp12 = SexticExtField<Bn254Fp2>

fn evaluate_lines_vec( f: Self::Fp12, lines: Vec<EvaluatedLine<Self::Fp2>>, ) -> Self::Fp12

Function to evaluate the line functions of the Miller loop

fn pre_loop( Q_acc: Vec<AffinePoint<Self::Fp2>>, _Q: &[AffinePoint<Self::Fp2>], c: Option<Self::Fp12>, xy_fracs: &[(Self::Fp, Self::Fp)], ) -> (Self::Fp12, Vec<AffinePoint<Self::Fp2>>)

Runs before the main loop in the Miller loop function

fn post_loop( f: &Self::Fp12, Q_acc: Vec<AffinePoint<Self::Fp2>>, Q: &[AffinePoint<Self::Fp2>], _c: Option<Self::Fp12>, xy_fracs: &[(Self::Fp, Self::Fp)], ) -> (Self::Fp12, Vec<AffinePoint<Self::Fp2>>)

Runs after the main loop in the Miller loop function

fn multi_miller_loop( P: &[AffinePoint<Self::Fp>], Q: &[AffinePoint<Self::Fp2>], ) -> Self::Fp12

Runs the multi-Miller loop with no embedded exponent

fn multi_miller_loop_embedded_exp( P: &[AffinePoint<Self::Fp>], Q: &[AffinePoint<Self::Fp2>], c: Option<Self::Fp12>, ) -> Self::Fp12

Runs the multi-Miller loop with an embedded exponent, removing the need to calculate the residue witness in the final exponentiation step

impl PairingCheck for Bn254

type Fp = Bn254Fp

type Fp2 = Bn254Fp2

type Fp12 = SexticExtField<Bn254Fp2>

fn pairing_check_hint( P: &[AffinePoint<Self::Fp>], Q: &[AffinePoint<Self::Fp2>], ) -> (Self::Fp12, Self::Fp12)

Given points P[], Q[], computes the multi-Miller loop and then returns the final exponentiation hint from Novakovic-Eagon https://eprint.iacr.org/2024/640.pdf.

fn pairing_check( P: &[AffinePoint<Self::Fp>], Q: &[AffinePoint<Self::Fp2>], ) -> Result<(), PairingCheckError>

impl PairingIntrinsics for Bn254

const PAIRING_IDX: usize = 0usize

Index for custom intrinsic opcode determination.

const XI: Fp2 = _

The sextic extension Fp12 is Fp2[X] / (X^6 - \xi), where \xi is a non-residue.

const FROBENIUS_COEFFS: [[Self::Fp2; 5]; 12] = _

Multiplication constants for the Frobenius map for coefficients in Fp2 c1..=c5 for powers 0..12 FROBENIUS_COEFFS[i][j] = \xi^{(j + 1) * (p^i - 1)/6} when p = 1 (mod 6)

type Fp = Bn254Fp

type Fp2 = Bn254Fp2

type Fp12 = SexticExtField<Bn254Fp2>