Crate sp1_bls12_381 

bls12_381

This crate provides an implementation of the BLS12-381 pairing-friendly elliptic curve construction.

• This implementation has not been reviewed or audited. Use at your own risk.
• This implementation targets Rust 1.36 or later.
• This implementation does not require the Rust standard library.
• All operations are constant time unless explicitly noted.

Re-exports

pub use g1::G1Affine;groups

pub use g1::G1Projective;groups

Modules

fpgroups

This module provides an implementation of the BLS12-381 base field GF(p) where p = 0x1a0111ea397fe69a4b1ba7b6434bacd764774b84f38512bf6730d2a0f6b0f6241eabfffeb153ffffb9feffffffffaaab

fp2groups

This module implements arithmetic over the quadratic extension field Fp2.

fp6groups

fp12groups

g1groups

This module provides an implementation of the $\mathbb{G}_1$ group of BLS12-381.

notes

Notes about how the BLS12-381 elliptic curve is designed, specified and implemented by this library.

Structs

Bls12pairings

A pairing::Engine for BLS12-381 pairing operations.

G2Affinegroups

This is an element of $\mathbb{G}_2$ represented in the affine coordinate space. It is ideal to keep elements in this representation to reduce memory usage and improve performance through the use of mixed curve model arithmetic.

G2Preparedpairings and alloc

This structure contains cached computations pertaining to a $\mathbb{G}_2$ element as part of the pairing function (specifically, the Miller loop) and so should be computed whenever a $\mathbb{G}_2$ element is being used in multiple pairings or is otherwise known in advance. This should be used in conjunction with the multi_miller_loop function provided by this crate.

G2Projectivegroups

This is an element of $\mathbb{G}_2$ represented in the projective coordinate space.

Gtpairings

This is an element of $\mathbb{G}_T$, the target group of the pairing function. As with $\mathbb{G}_1$ and $\mathbb{G}_2$ this group has order $q$.

MillerLoopResultpairings

Represents results of a Miller loop, one of the most expensive portions of the pairing function. MillerLoopResults cannot be compared with each other until .final_exponentiation() is called, which is also expensive.

Scalar

Represents an element of the scalar field $\mathbb{F}_q$ of the BLS12-381 elliptic curve construction.

Functions

multi_miller_looppairings and alloc

Computes $$\sum_{i=1}^n \textbf{ML}(a_i, b_i)$$ given a series of terms $$(a_1, b_1), (a_2, b_2), …, (a_n, b_n).$$

pairingpairings

Invoke the pairing function without the use of precomputation and other optimizations.