#elliptic-curve #cryptography #finite-fields

no-std dev ark-mnt4-298

The MNT4-298 pairing-friendly elliptic curve

7 unstable releases

0.5.0 Oct 28, 2024
0.5.0-alpha.0 Jun 20, 2024
0.4.0 Jan 17, 2023
0.4.0-alpha.2 Dec 28, 2022
0.2.0 Mar 25, 2021

#82 in #finite-fields

Download history 185/week @ 2025-09-17 203/week @ 2025-09-24 157/week @ 2025-10-01 116/week @ 2025-10-08 232/week @ 2025-10-15 302/week @ 2025-10-22 253/week @ 2025-10-29 294/week @ 2025-11-05 244/week @ 2025-11-12 172/week @ 2025-11-19 108/week @ 2025-11-26 159/week @ 2025-12-03 68/week @ 2025-12-10 181/week @ 2025-12-17 96/week @ 2025-12-24 43/week @ 2025-12-31

398 downloads per month
Used in 12 crates

MIT/Apache

610KB
13K SLoC

This library implements the MNT4_298 curve generated by [BCTV14]. The name denotes that it is a Miyaji--Nakabayashi--Takano curve of embedding degree 4, defined over a 298-bit (prime) field. The main feature of this curve is that its scalar field and base field respectively equal the base field and scalar field of MNT6_298.

Curve information:

  • Base field: q = 475922286169261325753349249653048451545124879242694725395555128576210262817955800483758081
  • Scalar field: r = 475922286169261325753349249653048451545124878552823515553267735739164647307408490559963137
  • valuation(q - 1, 2) = 17
  • valuation(r - 1, 2) = 34
  • G1 curve equation: y^2 = x^3 + ax + b, where
    • a = 2
    • b = 423894536526684178289416011533888240029318103673896002803341544124054745019340795360841685
  • G2 curve equation: y^2 = x^3 + Ax + B, where
    • A = Fq2 = (a * NON_RESIDUE, 0)
    • B = Fq2(0, b * NON_RESIDUE)
    • NON_RESIDUE = 17 is the quadratic non-residue used for constructing the extension field Fq2

Dependencies

~4–6MB
~100K SLoC