I’ve built an IRTF RFC-8032 compliant implementation of Ed25519 signature verification in Noir. This was able to reuse a lot of existing pieces so ended up being fairly straightforward (but expensive in terms of gate count).
It falls into two main pieces:
- noir-edwards-bignum - A fork of noir-edwards that allows you to use Bignum to define the base field. See the diff
- noir-ed25519 - The signature verification logic. Based on noir-eddsa.
If anyone is able to give it a review I would really appreciate it