Kate Commitments for aggregated off-chain voting

[bgits]

@nikeshnazareth

The most important difference is that users need BLS signatures for identities, not ETH addresses. So either that will require wallets to support BLS, or we need a chain with account abstraction (eg Optimism or ETH 2.0). Or hopefully someone can figure out a cool mathematical trick to sign an ECDSA message and translate that into a BLS signature, but I’m not holding my breath on that one.

BLS verification can already be done: BLS Signatures in Solidity

Even if not done in solidity it would be helpful to see how this would work in any language. Like a minimal viable polynomial commitment scheme.