Elliptic Curve Cryptography

Baby-JubJub curve

The Baby-JubJub curve is explained in more detail in Ethereum Improvement Proposals, no. 2494.

The zkBob solution uses twisted Edwards elliptic curve Baby-JubJub with the following parameters:

The curve equation: $a x^2 + y^2 = 1 + dx^2y^2$

Coefficient a: 168700

Coefficient d: 168696

The curve finite field modulus: 21888242871839275222246405745257275088548364400416034343698204186575808495617

The curve order: 21888242871839275222246405745257275088614511777268538073601725287587578984328

Subgroup cofactor: 8

Subgroup order: 2736030358979909402780800718157159386076813972158567259200215660948447373041

Generator point $(x, y)$: 15432774951723927157031250336277790668279068029556328898354949310072202318295, 1094793399012674419577823790376044935246658671901627841542961578327961423020