github.com/consensys/gnark-crypto@v0.14.0/ecc/ecc.md (about)

     1  ## Supported curves
     2  
     3  * BLS12-381 (Zcash)
     4  * BN254 (Ethereum)
     5  * BLS12-377 (ZEXE)
     6  * BW6-761 (EC supporting pairing on BLS12-377 field of definition)
     7  * BLS24-315
     8  * BW6-633 (EC supporting pairing on BLS24-315 field of definition)
     9  * BLS12-378 (GT-strong SNARK-friendly)
    10  * BW6-756 (EC supporting pairing on BLS12-378 field of definition)
    11  * STARK (STARK curve for ECDSA)
    12  
    13  ### Twisted edwards curves
    14  
    15  Each of these curve has a `twistededwards` sub-package with its companion curve. In particular, BLS12-381 comapnion curve is known as [Jubjub](https://z.cash/technology/jubjub/) and BN254's [Baby-Jubjub](https://iden3-docs.readthedocs.io/en/latest/_downloads/33717d75ab84e11313cc0d8a090b636f/Baby-Jubjub.pdf).
    16  
    17  They are of particular interest as they allow efficient elliptic curve cryptography inside zkSNARK circuits.