Faster Montgomery multiplication and Multi-Scalar-Multiplication for SNARKs - Archive ouverte HAL
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2023

Faster Montgomery multiplication and Multi-Scalar-Multiplication for SNARKs

Gautam Botrel
  • Fonction : Auteur
  • PersonId : 1211648

Résumé

The bottleneck in the proving algorithm of most of elliptic-curve-based SNARK proof systems is the Multi-Scalar-Multiplication (MSM) algorithm. In this paper we give an overview of a variant of the Pippenger MSM algorithm together with a set of optimizations tailored for curves that admit a twisted Edwards form. We prove that this is the case for SNARK-friendly chains and cycles of elliptic curves, which are useful for recursive constructions. Our contribution is twofold: first, we optimize the arithmetic of finite fields by improving on the well-known Coarsely Integrated Operand Scanning (CIOS) modular multiplication. This is a contribution of independent interest that applies to many different contexts. Second, we propose a new coordinate system for twisted Edwards curves tailored for the Pippenger MSM algorithm. Accelerating the MSM over these curves is critical for deployment of recursive proof< systems applications such as proof-carrying-data, blockchain rollups and blockchain light clients. We implement our work in Go and benchmark it on two different CPU architectures (x86 and arm64). We show that our implementation achieves a 40-47% speedup over the state-of-the-art implementation (which was implemented in Rust). This MSM implementation won the first place in the ZPrize competition in the open division “Accelerating MSM on Mobile” and will be deployed in two real-world applications: Linea zkEVM by ConsenSys and probably Celo network.
Fichier principal
Vignette du fichier
EdMSM.pdf (576.85 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03922635 , version 1 (04-01-2023)

Identifiants

Citer

Gautam Botrel, Youssef El Housni. Faster Montgomery multiplication and Multi-Scalar-Multiplication for SNARKs. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023, pp.504-521. ⟨10.46586/tches.v2023.i3.504-521⟩. ⟨hal-03922635v1⟩
149 Consultations
350 Téléchargements

Altmetric

Partager

More