A new efficient constant-time hashing to some Barreto-Naehrig curves (including BN256 and BN512)

Welcome back to ethresearch :slight_smile:

Thank you)

The Eth1 blockchain (which currently only has opcode support for BN254) is increasingly reticent to adding more opcodes.

Can you clarify this sentence please ?

Do you think it is likely significant improvements to Wahby-Boneh for BLS12-381 could be found, or does Wahby-Boneh feel close to optimal to you?

I think the hashing of Wahby-Boneh is quite optimal. I don’t see how to improve it.