rust-poseidon-bn254-pure

Self-contained (no external dependencies), pure Rust implementation of Poseidon and Poseidon2 hash functions over the BN254 curve's scalar field, using 32 bit limbs internally.

It's intended to be used on 32-bit platforms, eg. 32-bit RISC-V (rv32im) (though porting to 64 bits shouldn't be a big effort).

The algebra implementation is based on zikkurat-algebra and staging-agda.

TODO

• optimize squaring to use less multiplication
• benchmark RISC-V cycles
• add more Poseidon2 state widths than t=3
• implement circomlib-compatible Poseidon
• add a 64 bit version
• more complete testing of the field operations
• further optimizations