Talk ·

Pairings in Rank-1 Constraint System

21st International Conference on Applied Cryptography and Network Security (ACNS 2023) · Kyoto, Japan

This presentation is about the conference article that can be found online here. In this work, we consider efficiently implementing pairings in Rank-1 Constraint Systems (R1CS), a widely used model to express SNARK statements. We show that our techniques almost halve the arithmetic circuit depth of the previously best known pairing implementation on a Barreto–Lynn–Scott (BLS) curve of embedding degree 12, resulting in 70% faster proving time. We also investigate and implement the case of BLS curves of embedding degree 24.

← Back to talks