Skip to Main content Skip to Navigation
Conference papers

Optimized and secure pairing-friendly elliptic curves suitable for one layer proof composition

Youssef El Housni 1 Aurore Guillevic 2
1 GRACE - Geometry, arithmetic, algorithms, codes and encryption
LIX - Laboratoire d'informatique de l'École polytechnique [Palaiseau], Inria Saclay - Ile de France
2 CARAMBA - Cryptology, arithmetic : algebraic methods for better algorithms
Inria Nancy - Grand Est, LORIA - ALGO - Department of Algorithms, Computation, Image and Geometry
Abstract : A zero-knowledge proof is a method by which one can prove knowledge of general non-deterministic polynomial (NP) statements. SNARKs are in addition non-interactive, short and cheap to verify. This property makes them suitable for recursive proof composition, that is proofs attesting to the validity of other proofs. To achieve this, one moves the arithmetic operations to the exponents. Recursive proof composition has been empirically demonstrated for pairing-based SNARKs via tailored constructions of expensive pairing-friendly elliptic curves namely a pair of 753-bit MNT curves, so that one curve's order is the other curve's base field order and vice-versa. The ZEXE construction restricts to one layer proof composition and uses a pair of curves, BLS12-377 and CP6-782, which improve significantly the arithmetic on the first curve. In this work we construct a new pairing-friendly elliptic curve to be used with BLS12-377, which is STNFS-secure and fully optimized for one layer composition. We propose to name the new curve BW6-761. This work shows that it is at least five times faster to verify a composed SNARK proof on this curve compared to the previous state-of-the-art, and proposes an optimized Rust implementation that is almost thirty times faster than the one available in ZEXE library.
Document type :
Conference papers
Complete list of metadatas

Cited literature [31 references]  Display  Hide  Download
Contributor : Aurore Guillevic <>
Submitted on : Friday, October 9, 2020 - 2:55:23 PM
Last modification on : Saturday, October 10, 2020 - 3:35:52 AM


Files produced by the author(s)


  • HAL Id : hal-02962800, version 1


Youssef El Housni, Aurore Guillevic. Optimized and secure pairing-friendly elliptic curves suitable for one layer proof composition. CANS 2020 - 19th International Conference on Cryptology and Network Security, Dec 2020, Vienna, Austria. ⟨hal-02962800⟩



Record views


Files downloads