NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
crates.io · #3805 most downloaded on crates.io
Implementation of the BLS12-381 pairing-friendly elliptic curve construction
Last release 22 days ago
15 Sep 2026
Ships unpredictably
gaps range from 2 weeks to 3.6 years
Most releases are documented
notes for 11 of 14 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
14 releases · first in 2019
Bumped dependencies to digest 0.10, ff 0.14, group 0.14, pairing 0.24, rand_core 0.10.
digest 0.10, ff 0.14, group 0.14, pairing 0.24,
rand_core 0.10.experimental: Migrated to Hashing to curves
(Internet Draft v16).Bumped dependencies to ff 0.13, group 0.13, pairing 0.23.
ff 0.13, group 0.13, pairing 0.23.One column per quarter.
Mul implementations for {G1Affine, G1Projective, G2Affine, G2Projective} with Scalar on the left-hand side. These enable code to be written matching e
Mul implementations for {G1Affine, G1Projective, G2Affine, G2Projective}
with Scalar on the left-hand side. These enable code to be written matching
equations that use the additive notation [a] P.Gt.Bumped dependencies to ff 0.12, group 0.12, pairing 0.22.
1.56.0ff 0.12, group 0.12, pairing 0.22.G2 arithmetic is now 25-30% faster across the board.
The deprecated endo feature flag.
bls12_381::Gt::default() now returns Gt::identity() instead of a nonsensical value.zeroize feature flag.bls12_381::MillerLoopResult trait implementations:
DefaultAddAssign<MillerLoopResult>AddAssign<&MillerLoopResult>ff 0.11, group 0.11, pairing 0.21.endo feature flag.bits feature flag (on by default) that exposes an ff::PrimeFieldBits implementation on bls12_381::Scalar.
bits feature flag (on by default) that exposes an ff::PrimeFieldBits implementation
on bls12_381::Scalar.experimental feature flag, for features have no backwards-compatibility guarantees and
may change at any time.experimental feature flag.ff 0.10, group 0.10, pairing 0.20.The endo feature is on by default. The endo feature flag itself is deprecated, and will be removed in a future minor release.
ff 0.9, group 0.9, pairing 0.19, rand_core 0.6.endo feature is on by default. The endo feature flag itself is deprecated, and
will be removed in a future minor release.Nothing published for this version
Nothing published for this version
This release adds implementations of the ff, group, and pairing traits (with the latter two being gated by the groups and pairings feature flags respe
This release adds implementations of the ff, group, and pairing traits (with the
latter two being gated by the groups and pairings feature flags respectively).
Additional trait implementations (for standard traits) have been added where the ff,
group, and pairing trait bounds require them.
bls12_381::Bls12, a pairing::Engine for BLS12-381 pairing operations. It implements
the following traits:
pairing::{Engine, MultiMillerLoop}bls12_381::G1Projective:
group::{Curve, Group, GroupEncoding, WnafGroup}group::prime::{PrimeCurve, PrimeGroup}bls12_381::G1Affine:
group::{GroupEncoding, UncompressedEncoding}group::prime::PrimeCurveAffinepairing::PairingCurveAffinebls12_381::G2Projective:
group::{Curve, Group, GroupEncoding, WnafGroup}group::prime::{PrimeCurve, PrimeGroup}bls12_381::G2Affine:
group::{GroupEncoding, UncompressedEncoding}group::prime::PrimeCurveAffinepairing::PairingCurveAffinebls12_381::Gt:
group::Groupbls12_381::MillerLoopResult:
pairing::MillerLoopResultbls12_381::Scalar:
ff::{Field, PrimeField}Added clear_cofactor methods to G1Projective and G2Projective . If the crate feature endo is enabled the G2 cofactor clearing will use the curve endom
Added clear_cofactor methods to G1Projective and G2Projective. If the crate feature endo
is enabled the G2 cofactor clearing will use the curve endomorphism technique described by
Budroni-Pintore. If the crate feature endo is not enabled then
the code will simulate the effects of the Budroni-Pintore cofactor clearing in order to keep
the API consistent. In September 2020, when patents US7110538B2 and US7995752B2 expire, the
endo feature will be made default. However, for now it must be explicitly enabled.
Release of bls12_381 0.1.0.
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →