Smart contract supporting MiMC hash in gnark

[heianqishijueqile]

In Tornado Cash, there is a contract specifically for computing the MiMC hash, which can be used with Circom to create zero-knowledge proofs. If I want to use gnark for MiMC hash zero-knowledge proofs, is there a contract compatible with the MiMC hash algorithm in gnark?

[ThomasPiellard]

hi @heianqishijueqile , we do have the implementation of mimc on bls12-377 (corresponding to gnark-crypto's implementation) here https://github.com/Consensys/linea-monorepo/blob/main/contracts/contracts/lib/Mimc.sol

We unrolled the loop for performances reason, you can adapt the code for the implementation of mimc on other curves (it's the exact same loop, only the counter and the constants differ)

[cxmqq333]

hi @heianqishijueqile , we do have the implementation of mimc on bls12-377 (corresponding to gnark-crypto's implementation) here https://github.com/Consensys/linea-monorepo/blob/main/contracts/contracts/lib/Mimc.sol

We unrolled the loop for performances reason, you can adapt the code for the implementation of mimc on other curves (it's the exact same loop, only the counter and the constants differ)

"Is there an implementation based on other curves?" like bn254 bls12-381 ....

[ivokub]

We don't have a direct implementation. But modifying the Solidity code from bls12-377 MiMC to other curves should be straightforward by referencing the round constants using GetConstants() method.

[cxmqq333]

We have just implemented the mimic based on bls12-381. Do we need to submit a PR to merge it into the demo?

[ivokub]

I think it is not necessary - you could use your local fork. Linea codebase is not general purpose library and the PR will probably be rejected.