ed25519 signature verification circuit implementation in gnark

[1010adigupta]

Is there a working implementation for ed25519 signature verification circuit using gnark
@ivokub

[ivokub]

Unfortunately we don't yet. But would definitely welcome as a contribution. What concerns me a bit about ed25519 is that even though it is somewhat more efficient than ECDSA, then afaik it is hardcoded with SHA2, which is inefficient to compute inside the circuit.