Two elliptic curve standards:
- secp256k1 is used by Bitcoin and Ethereum
- secp256r1, aka P-256, is used everywhere else. Passkeys, the Secure Enclave, iCloud Keychain, Yubikey, ...

If you can verify P-256 signatures onchain, you can make a *much* nicer self-custody experience.

Safe, fast, no seed phrase.

We just shipped an open-source P-256 verifier, audited by Veridise. Huge props to @nibnalin.eth. Details below.

It's a key part of Daimo--more on that soon--and we hope it's useful to lots of other projects, too.

Real World Ethereum 🌎 
building /daimo ✳️ 

It's also a drop-in replacement for the EIP-7212 precompile (shoutout @0xulas.eth and @doganeth) for chains which don't have the precompile yet.

It's also a drop-in replacement for the EIP-7212 precompile (shoutout @ulas and @doganeth) for chains which don't have the precompile yet.

https://eips.ethereum.org/EIPS/eip-7212

We just shipped an open-source P-256 verifier, audited by Veridise. Huge props to @nibnalin.eth. Details below.

It's a key part of Daimo--more on that soon--and we hope it's useful to lots of other projects, too.

https://daimo.xyz/blog/p256verifier

read this paper on ECC point multiplication opti for EVM. 

it reduces the P256 verification gas cost by a factor of 11x and perf by a factor of 6x 

https://eprint.iacr.org/2023/939.pdf

blockchain engineer @ https://openfort.xyz /
https://unchained-onchain.xyz / built @factchain / opinions entirely those of others / rekt 👎 ship 👍

Yeah our implementation is partly derived from Renaud’s excellent work

yep we're working on it https://eips.ethereum.org/EIPS/eip-7212

This is what I was told.
https://warpcast.com/doganeth/0xc62d42d2

I asked why k1 is used over r1

TLDR no great reason, maybe NSA backdoor potential

I asked why k1 is used over r1

TLDR no great reason, maybe NSA backdoor potential

https://chat.openai.com/share/a9263519-7e11-4c78-829a-e77007ba691d