Better curve than Yeti?

[yelhousni]

Hey! how about this BW6-767 curve defined over the scalar field of BLS12-381?

• blog post: https://ethresear.ch/t/bw6-over-bls12-381/10321
• code: https://github.com/yelhousni/gnark-crypto/tree/feat/bw6_on_bls12-381/ecc/bw6-767

It is on 12 machine words instead of 13 (with one spare bit for couple of optims) + it has parameters in polynomial form allowing fast implementation.

[weikengchen]

Actually, this is a good idea.

[weikengchen]

Do you already have a script that generates the parameters? or we can work together on this.

I just feel that the BW6 method has a higher entry bar, but it could be minimized with scripts.