Hello, is there any way to generate verifiers for func with circom/snarklibjs ?

Or should I first do it for solidity and then rewrite the verifier to func?

Hi, pairing operation is not still implemented in TVM and if you want to implement it in func it’ll not be gas efficient
You can check my implementation here:
https://github.com/SaberDoTcodeR/func-alt-bn128

Thanks! Will check it out

And what about zk friendly hash algorithms ? Like mimcsponge or Poseidon?

you have any statistics about gas usage?

for zk snark we need a pairing operation on 4 points and as far as I checked each miller loop will cost arround 1000 ton , so 4000 for a pairing of 4 points. Basically it’s infeasible in func, I think as Durov mentioned it in the whitepaper the core team should implement the alt-bn128 curve in the TVM opcodes

but if we only need to verify the proof, will only 1 pairing operation be required?

yeah 1 pairing with 4 miller loop

so this 1 pairing costs 250 ton?)

what’s miller loop? and this pairing thing. thanks)

@yungwine edited this one for clarification

oh got it thanks

the most expensive computations ever

if you are interested in details, Vitalik explained it perfect:
https://medium.com/@VitalikButerin/exploring-elliptic-curve-pairings-c73c1864e627

So it means zk proofs are not possible for now in ton?

hmm, that’s what we are trying to change(I’ll share my update in a few weeks)

Thank you! Keep me updated haha please 😁

Do we have strong reasons to support alt-bn128? bls12-381 looks more preferable