Just tested (on a MacBookPro 2,8 GHz Quad-Core Intel Core i7) generating a proof for a program that verifies the signature of a Farcaster message using SP1 and RISC0. SP1 generated the proof in 713,895 ms (~12 minutes), while RISC0 took 2,741,947 ms (~45 minutes).

oracles, coprocessors, bridges & wallets since 2017 + Building /boostyblast

wow thats a lot.

does public key decoding happens within the circuit? could we convert hex to byte array in the host and pass that in the env?

yes! i didn't do it just for simplicity but it does make sense!