Just tested (on a MacBookPro 2,8 GHz Quad-Core Intel Core i7) generating a proof for a program that verifies the signature of a Farcaster message using SP1 and RISC0. SP1 generated the proof in 713,895 ms (~12 minutes), while RISC0 took 2,741,947 ms (~45 minutes).

oracles, coprocessors, bridges & wallets since 2017 + Building /boostyblast

yes! i didn't do it just for simplicity but it does make sense!

wow thats a lot.

does public key decoding happens within the circuit? could we convert hex to byte array in the host and pass that in the env?

Glad to see this! Don't forget to use RISC Zero's patched curve25519-dalek crate when preforming cryptographic operations in the r0 zkVM. Proving ed25519 signature verification with the patch takes less than 2 minutes on my macbook m2-max.

Glad to see this! Don't forget to use RISC Zero's patched curve25519-dalek crate when preforming cryptographic operations in the r0 zkVM. Proving ed25519 signature verification with the patch takes less than 2 minutes on my macbook m2-max. 

https://github.com/risc0/curve25519-dalek