clearmatics / mobius

Trustless Tumbling for Transaction Privacy
GNU Lesser General Public License v3.0
85 stars 23 forks source link

Optimized ecmul on secp256k1 #69

Open k06a opened 6 years ago

k06a commented 6 years ago

Recently Vitalik Buterin proposed to abuse ecrecover to compute hashed result of ecmul: https://ethresear.ch/t/you-can-kinda-abuse-ecrecover-to-do-ecmul-in-secp256k1-today/2384

I had implemented his idea: https://github.com/1Address/ecsol/blob/master/contracts/EC.sol

It uses about 32K gas to call ecmulVerify.