scalus.cardano.onchain.plutus.crypto.accumulator

On-chain bilinear accumulator with the accumulator value on G1.

The setup (CRS) uses G2 powers of tau. The accumulator and membership proofs are G1 points. This variant is compatible with Ethereum KZG ceremonies (which provide G1 and G2 powers) and hydrozoa.

G1 accumulator is more expensive on-chain (G2 commitment in verification) but allows using existing ceremony data without re-generation.

On-chain bilinear accumulator with the accumulator value on G2.

The setup (CRS) uses G1 powers of tau. The accumulator and membership proofs are G2 points. Verification uses pairings to check polynomial relationships.

This variant is cheaper on-chain because the G1 commitment (multi-scalar multiplication on G1) is less expensive than G2 operations.

On-chain polynomial operations for bilinear accumulator verification.

Computes product polynomials and polynomial commitments on G1/G2 curve groups. Used by both G1Accumulator and G2Accumulator for membership and non-membership verification.