Links

Elliptic Curve Cryptography

Baby-JubJub curve
The Baby-JubJub curve is explained in more detail in Ethereum Improvement Proposals, no. 2494.
The zkBob solution uses twisted Edwards elliptic curve Baby-JubJub with the following parameters:
The curve equation:
ax2+y2=1+dx2y2a x^2 + y^2 = 1 + dx^2y^2
​
Coefficient a: 168700
Coefficient d: 168696
The curve finite field modulus: 21888242871839275222246405745257275088548364400416034343698204186575808495617
The curve order: 21888242871839275222246405745257275088614511777268538073601725287587578984328
Subgroup cofactor: 8
Subgroup order: 2736030358979909402780800718157159386076813972158567259200215660948447373041
Generator point
(x,y)(x, y)
: 15432774951723927157031250336277790668279068029556328898354949310072202318295, 1094793399012674419577823790376044935246658671901627841542961578327961423020
​
​