Families of SNARK-friendly 2-chains of elliptic curves - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2022

Families of SNARK-friendly 2-chains of elliptic curves


At CANS'20, El Housni and Guillevic introduced a new 2-chain of pairing-friendly elliptic curves for recursive zero-knowledge Succinct Non-interactive ARguments of Knowledge (zk-SNARKs) made of the former BLS12-377 curve (a Barreto–Lynn–Scott curve over a 377-bit prime field) and the new BW6-761 curve (a Brezing–Weng curve of embedding degree 6 over a 761-bit prime field). First we generalise the curve construction, the pairing formulas (e : G1 × G2 → GT) and the group operations to any BW6 curve defined on top of any BLS12 curve, forming a family of 2-chain pairing-friendly curves. Second, we investigate other possible 2-chain families made on top of the BLS12 and BLS24 curves. We compare BW6 to Cocks–Pinch curves of higher embedding degrees 8 and 12 (CP8, CP12) at the 128-bit security level. We derive formulas for efficient optimal ate and optimal Tate pairings on our new CP curves. We show that for both BLS12 and BLS24, the BW6 construction always gives the fastest pairing and curve arithmetic compared to Cocks–Pinch curves. Finally, we suggest a short list of curves suitable for Groth16 and KZG-based universal SNARKs and present an optimized implementation of these curves. Based on Groth16 and PlonK (a KZG-based SNARK) implementations in the gnark ecosystem, we obtain that the BLS12-377/BW6-761 pair is optimized for the former while the BLS24-315/BW6-672 pair is optimized for the latter.
Fichier principal
Vignette du fichier
22_EC_ElHousni_Guillevic_Families_SNARK_friendly_2chains_EC.pdf (590.65 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03371573 , version 1 (08-10-2021)
hal-03371573 , version 2 (12-07-2022)



Youssef El Housni, Aurore Guillevic. Families of SNARK-friendly 2-chains of elliptic curves. Advances in Cryptology - EUROCRYPT 2022 - 41st Annual International Conference on the Theory and Applications of Cryptographic Techniques, Colin Boyd, May 2022, Trondheim / Hybrid, Norway. pp.367-396, ⟨10.1007/978-3-031-07085-3_13⟩. ⟨hal-03371573v2⟩
253 View
499 Download



Gmail Mastodon Facebook X LinkedIn More