mratsim / constantine

Constantine: modular, high-performance, zero-dependency cryptography stack for verifiable computation, proof systems and blockchain protocols.
Other
413 stars 44 forks source link

Optimize batch verification for same message (Pippenger msm) #443

Open etan-status opened 4 months ago

etan-status commented 4 months ago

When batch verifying sets of pubkey/signatures, each pubkey/signature pair needs to be scaled by a random factor. While this is generally supported, further efficiency gains could be made for signature sets that share the same message, e.g., using Pippenger multi scalar multiplication (blst).