scroll-halo2

Scroll's Halo2 zkEVM proof system

scroll L2 proof-system final protocol spec BN254

Native status: Mainnet
Enables: A bytecode-compatible zkEVM proved with Halo2 and KZG commitments over BN254
Specification: https://docs.scroll.io/en/technology/zkevm/zkevm-overview/

Scroll is a bytecode-compatible zkEVM rollup whose circuits use Halo2, modified to use KZG polynomial commitments in place of Halo2's original inner-product argument, over the BN254 (alt_bn128) curve. The resulting SNARK is verified on Ethereum through the EIP-197 pairing precompile. BN254 is the cross-ecosystem hook: the same pairing curve Ethereum (EIP-196/EIP-197), Solana (SIMD-0129), and Aztec expose, here as the curve underlying Scroll's Halo2-KZG verifier.

Implementations

zkevm-circuits rust not independently audited

Relationships

Equivalent to: EIP-197