This library implements a twisted Edwards curve whose base field is the scalar field of the curve BN254. This allows defining cryptographic primitives that use elliptic curves over the scalar field of the latter curve. This curve is also known as Baby-Jubjub.

Curve information:

• Base field: q = 21888242871839275222246405745257275088548364400416034343698204186575808495617
• Scalar field: r = 2736030358979909402780800718157159386076813972158567259200215660948447373041
• Valuation(q - 1, 2) = 28
• Valuation(r - 1, 2) = 4
• Curve equation: ax^2 + y^2 =1 + dx^2y^2, where
  • a = 168700
  • d = 168696

ark-babyjubjub

This is just a quick fork of ark-ed-on-bn254, because that crate actually does not implement the babyjubjub curve as specified to be compatible with Circom.

The original ark-ed-on-bn254 crate is licensed under Apache 2.0 and/or MIT.