📄️ Overview
Aleo uses two elliptic curves that work together as a complementary pair: BLS12-377 and Edwards BLS12.
📄️ Edwards BLS12
Edwards BLS12 is a twisted Edwards curve defined over the same base field as BLS12-377's scalar field Fr. The twisted Edwards form:
📄️ BLS12-377
BLS12-377 is a pairing-friendly curve in the Barreto–Lynn–Scott family with embedding degree 12. It was chosen specifically so that its scalar field Fr has 2-adicity 47 — meaning 2⁴⁷ divides Fr − 1 — which is required for efficient FFTs in the proof system.