1/2

Ok question for the ETH tech community: why don’t we have lots more precompiles?

For example, I can’t do Ed25519 in a smart contract due to precision/scale issues, but could make it a precompile that nodes could run.

As long as the gas fee is high enough to deter frequent use, is there a drawback?

2/2

Put differently, is there reasons to not make available high computational cost functions as precompiles as long as we price them efficiently?

Or, are we risking increasing the specs for nodes too much if we start adding these?

Maybe I’m not fully grasping the role of precompiles.

It sounds redundant to add Ed25519 signatures when you already have ECDSA signatures. Shor's algorithm can compute discrete logs in elliptic curves and thereby recover the secret scalar from a public Ed25519 key, which you can use to forge signatures of your choice. Better use something quantum resistant like SPHINCS+