✳flâneur — a map of the web's best reading

Verify ed25519 signatures cheaply on Eth using ZK-Snarks - zk-s[nt]arks - Ethereum Research

ethresear.ch · 1,579 words · saved by 1 readers

In this article, we will discuss how you can verify Ed25519 signatures on Ethereum today in a very gas-efficient way, without the use of any pre-compiles such as the proposed EIP665. We will use the same principles as used by many zk-rollups. We have already shipped the code for this, albeit not yet audited. Let’s get to it. For dApps that want to verify Ed25519 signatures on Ethereum, rather than verifying the signature(s) directly on Ethereum, (and performing the curve operations inside a solidity smart contract), one can construct a zk-proof of signature validity and verify the proof on-chain instead. Gas cost for verification of a single Ed25519 signature is about ~500K gas (when the Ed25519 curve is implemented directly in Solidity). On the other hand, the gas cost for verifying a zk-snark on-chain is about ~300k gas. These gas savings become significant when you want to verify a large number of signatures in one batch, then you can just create a single ZK-proof for the entire bat

Verify ed25519 signatures cheaply on Eth using ZK-Snarks - zk-s[nt]arks - Ethereum Research Verify ed25519 signatures cheaply on Eth using ZK-Snarks zk-s[nt]arks garvitgoel July 25, 2022, 5:19am 1 Prepared by : Garvit Goel, Rahul Ghangas, Jinank Jain In this article, we will discuss how you can verify Ed25519 signatures on Ethereum today in a very gas-efficient way, without the use of any pre-compiles such as the proposed EIP665. We will use the same principles as used by many zk-rollups. We have already shipped the code for this, albeit not yet audited. Let’s get to it. For dApps that want to

Explore this link on the map →

related reading