• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Riscv
      • Taspi
      • Bitcoin
      • Des
      • Ethereum
      • X86isa
      • Sha-2
      • Yul
      • Zcash
      • Proof-checker-itp13
      • Regex
      • ACL2-programming-language
      • Json
      • Jfkr
      • Equational
      • Cryptography
      • Poseidon
      • Where-do-i-place-my-book
      • Axe
      • Aleo
      • Bigmems
      • Builtins
      • Execloader
      • Solidity
      • Paco
      • Concurrent-programs
      • Bls12-377-curves
        • Edwards-bls12
        • Bls12-377-domain-parameters
          • Bls12-377-parameter-x
          • Bls12-377-scalar-field-prime
            • Bls12-377-base-field-prime
      • Debugging
      • Community
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Bls12-377-domain-parameters

    Bls12-377-scalar-field-prime

    The prime r.

    The prime r is the scalar field size of the curve E_{BLS}, and is also the base field size of the twisted Edwards curve E_{Ed/BLS}.

    r is computed from the parameter x: r = x^4 - x^2 + 1

    Figure 16 of the Zexe paper lists its value in hexadecimal:

    0x12ab655e9a2ca55660b44d1e5c37b00159aa76fed00000010a11800000000001