RIP-7212

Precompile for secp256r1 Curve Support

rollup L2 primitive final secp256r1

Native status: Final
Enables: secp256r1 signature verification on rollups
Specification: https://github.com/ethereum/RIPs/blob/master/RIPS/rip-7212.md

The first Rollup Improvement Proposal, RIP-7212 specifies a precompile that verifies secp256r1 (NIST P-256) signatures, letting rollups check signatures from hardware enclaves and WebAuthn/passkey signers cheaply on-chain. It was adopted across many Layer 2s before being standardized at L1 by EIP-7951, which keeps the same interface while fixing a missing point-at-infinity check and a modular-comparison bug. The shared primitive is secp256r1, the same curve Ethereum (EIP-7951) and Solana (SIMD-0075) expose.

Implementations

p256-verifier solidity audited report

Relationships

Superseded by: EIP-7951