@lfdecentralizedtrust/zeto-contracts 0.2.2 → 0.5.0

package/contracts/verifiers/{verifier_anon_nullifier_transferLocked.sol → impl/anon_nullifier_transfer.sol}

@@ -20,7 +20,7 @@
 
 pragma solidity >=0.7.0 <0.9.0;
 
-contract Groth16Verifier_AnonNullifierTransferLocked {
+contract Verifier_AnonNullifierTransfer {
     // Scalar field size
     uint256 constant r    = 21888242871839275222246405745257275088548364400416034343698204186575808495617;
     // Base field size
@@ -52,23 +52,20 @@ contract Groth16Verifier_AnonNullifierTransferLocked {
     uint256 constant IC2x = 11538009073536561162431603046042378506434129710246113579796569619470355977356;
     uint256 constant IC2y = 18200656560016022729405688044864673805927167342575989505621039477255562885095;
     
-    uint256 constant IC3x = 2994496697551537161027252901753322080645336354216497814498670200181765363053;
-    uint256 constant IC3y = 18016400267889053983219307142472720344726846344547170629412157953703571362545;
+    uint256 constant IC3x = 16060424900281789113856869053727496302295520075201955371229184101176742019112;
+    uint256 constant IC3y = 7833246346420318094523191406657909832948492362877179000610063345430143769697;
     
-    uint256 constant IC4x = 18863335569539739396766652172090162120452417984595337854516358792928662933146;
-    uint256 constant IC4y = 895637228501438570895861990412283458151664228309618059564721843986317727854;
+    uint256 constant IC4x = 1167903139320461673730146790352309165100002152797819099757601178981873676571;
+    uint256 constant IC4y = 12981611873802789105958141408359145370994325864169284450155625189242411024122;
     
-    uint256 constant IC5x = 9021487572545346998557072380290676292375268026740672278134521271589857001777;
-    uint256 constant IC5y = 7135575528728803678650135988577921626524623672239272328235499185595020148573;
+    uint256 constant IC5x = 20773020415848698598468478160768655922713869022241397741152588611764469765759;
+    uint256 constant IC5y = 3428403864418547287693751509569561378183428598972823612146679585580293690972;
     
-    uint256 constant IC6x = 18765108579694827258508274322433673527825894662470202987481814503544607518088;
-    uint256 constant IC6y = 5563488577126492091162317670717698154299894098638990768578829262629501161848;
+    uint256 constant IC6x = 15674579346918082060062949471055203685989363986238424085033128428743473529013;
+    uint256 constant IC6y = 9126381316540146842373796334750733369806543224338767018342599704279030186328;
     
-    uint256 constant IC7x = 19361849162887617962370606102408011379832429829984687335102807573735291901168;
-    uint256 constant IC7y = 1728377098553953891806317478458795861474999824293327832086878325186616125174;
-    
-    uint256 constant IC8x = 15590566039348482609378805660317581071082774252842945453976612859375632192241;
-    uint256 constant IC8y = 7414583059436497224674542800033160660870802119716266452150429658361893709028;
+    uint256 constant IC7x = 17375655877097475551894724405341759891777951116707914297938348038970054234761;
+    uint256 constant IC7y = 17844212665933336469595879705672773898766845640145736759052525282105784315179;
     
  
     // Memory data
@@ -77,7 +74,7 @@ contract Groth16Verifier_AnonNullifierTransferLocked {
 
     uint16 constant pLastMem = 896;
 
-    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[8] calldata _pubSignals) public view returns (bool) {
+    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[7] calldata _pubSignals) public view returns (bool) {
         assembly {
             function checkField(v) {
                 if iszero(lt(v, r)) {
@@ -135,8 +132,6 @@ contract Groth16Verifier_AnonNullifierTransferLocked {
                 
                 g1_mulAccC(_pVk, IC7x, IC7y, calldataload(add(pubSignals, 192)))
                 
-                g1_mulAccC(_pVk, IC8x, IC8y, calldataload(add(pubSignals, 224)))
-                
 
                 // -A
                 mstore(_pPairing, calldataload(pA))
@@ -204,8 +199,6 @@ contract Groth16Verifier_AnonNullifierTransferLocked {
             
             checkField(calldataload(add(_pubSignals, 192)))
             
-            checkField(calldataload(add(_pubSignals, 224)))
-            
 
             // Validate all evaluations
             let isValid := checkPairing(_pA, _pB, _pC, _pubSignals, pMem)

package/contracts/verifiers/{verifier_anon_nullifier_transferLocked_batch.sol → impl/anon_nullifier_transfer_batch.sol}

@@ -20,7 +20,7 @@
 
 pragma solidity >=0.7.0 <0.9.0;
 
-contract Groth16Verifier_AnonNullifierTransferLockedBatch {
+contract Verifier_AnonNullifierTransferBatch {
     // Scalar field size
     uint256 constant r    = 21888242871839275222246405745257275088548364400416034343698204186575808495617;
     // Base field size
@@ -76,71 +76,68 @@ contract Groth16Verifier_AnonNullifierTransferLockedBatch {
     uint256 constant IC10x = 6520359164220525265155386274709266517766289259436803139853734621791509514404;
     uint256 constant IC10y = 21368162840781823986174234261008274176487028095574542697455308297011056522636;
     
-    uint256 constant IC11x = 9974538132428964680219204591139933257236363924840101653935271972025657767035;
-    uint256 constant IC11y = 4942469904659636402971335966795132675974922448166612942908890857874246613246;
+    uint256 constant IC11x = 11986049124283047338689275016354659993085995403687773059614159878672406545037;
+    uint256 constant IC11y = 1720839942816430712816903108884813241869643182010336846593958574729389440480;
     
-    uint256 constant IC12x = 1449700610141036564231349956718990092923668589008914901255304492978196689411;
-    uint256 constant IC12y = 15022060421169999219261094873407391413187459047232642989914901915082306892036;
+    uint256 constant IC12x = 12410983687677574157893657225675183803303132301532659422552214052530726469317;
+    uint256 constant IC12y = 17824345118891411719771382010799290239467606961339235068922789659663655509754;
     
-    uint256 constant IC13x = 1553718823578846863111628794399930584656979357695381490925822683578791895008;
-    uint256 constant IC13y = 13719144689314028957988248720514401557625557549852410301331966007612091216915;
+    uint256 constant IC13x = 19444872974172689434561725816869098654627826005137317657361016988886067248336;
+    uint256 constant IC13y = 3172141317144739547875932810700616635313442420128093386048940765681131092361;
     
-    uint256 constant IC14x = 6705594505209444155372715803820945347690194941093503206540880610013875875152;
-    uint256 constant IC14y = 10017801547150225219488615760046841410176688469239363475488139127286632544762;
+    uint256 constant IC14x = 6341822874573516725445274172596187511776250848357140465985666938085067778605;
+    uint256 constant IC14y = 10990036049763065187228663840382596985383914188335629682023429665320288002265;
     
-    uint256 constant IC15x = 6880791122402255666598716263003268916723566227940886939621652922030648061222;
-    uint256 constant IC15y = 2636893401291241013062181210979823743095889410755235149021483922077913688463;
+    uint256 constant IC15x = 3563685232497885739427596637416450424787463707609627934104367359850504982303;
+    uint256 constant IC15y = 14523974417703319423058515825317379629896605049279696879645515541999709097899;
     
-    uint256 constant IC16x = 19545059651177765733278803055255344416170843816921142707027932281153522623851;
-    uint256 constant IC16y = 15172758788044894126846176257997140587449407246760231841406910366980031843195;
+    uint256 constant IC16x = 10426055994788300403026220351488163197517295733007869321776166355731683467471;
+    uint256 constant IC16y = 18175812088634093492623689292236125764292351272021854381676202255919008010343;
     
-    uint256 constant IC17x = 1077581862741804731983328788596463622247191989724927526432613776956695339272;
-    uint256 constant IC17y = 1362550943158643487364517986996732587803463074680706188753903911108498258846;
+    uint256 constant IC17x = 3950389660730108543529631996339492738202948080219082719068949318015974186960;
+    uint256 constant IC17y = 2727547245375504168114490191114505397213374496025773532049654614435667570690;
     
-    uint256 constant IC18x = 6685077937639898950226642807719129122483195172282088610880443845250449665037;
-    uint256 constant IC18y = 3747041236823858970509703759100789823181986619751354260719642170432031511022;
+    uint256 constant IC18x = 8878853611820647211708603584241467289939654374955042014923131062893095601257;
+    uint256 constant IC18y = 13640555931452954554478583351999961428703214573943103283873522300398348512261;
     
-    uint256 constant IC19x = 16815711356835759438370522493804133313410851024172124501659493146338866798172;
-    uint256 constant IC19y = 6464876295181192433903608462208098881328050814746877985045172119298429148467;
+    uint256 constant IC19x = 19706318980768223269467987992862357090252614480154835271757186053712302707054;
+    uint256 constant IC19y = 3550479890941383303746854615447654371345839372883939502972660199314609198224;
     
-    uint256 constant IC20x = 14108968078114507429481466363166013759548242107691073304229197538001791283289;
-    uint256 constant IC20y = 979666287692658704478319788694308922921381414088434420655687977685704964307;
+    uint256 constant IC20x = 13754703141709110513251981557546245368692890422611576710774721290436667971547;
+    uint256 constant IC20y = 15622915412029160187321643908593105738313134938831581567824879502136844415106;
     
-    uint256 constant IC21x = 12022447094466995705155930553795245117734392470403323110011678510000706082830;
-    uint256 constant IC21y = 10128031196469927983642781782111493931401931734018649631940982559057123865420;
+    uint256 constant IC21x = 12878657066345957537439144048759746489348595042995392127741332409892311328989;
+    uint256 constant IC21y = 5634533423081799906181954901378182109129522944123920261387973446573637973526;
     
-    uint256 constant IC22x = 10680008203420642362537419690619967612853008979492550760309901699402005802011;
-    uint256 constant IC22y = 17516220209359176184060490144452446805928785496692380488879083318355842725734;
+    uint256 constant IC22x = 1747558549104994006853755338447511580410928014353375959457633482435305339657;
+    uint256 constant IC22y = 16693561381938465114233116706143740771384240170854874824494628919950181351869;
     
-    uint256 constant IC23x = 19600126252778916941342697745622255626721374716330173050633429811774995297020;
-    uint256 constant IC23y = 7817176476902676935597895059663061974999654210359837422993482290726050596109;
+    uint256 constant IC23x = 1613138279337931031857254936115331776171624220704338069120610390082066380417;
+    uint256 constant IC23y = 8417894649949518720347097876791220132985676261354432557373036131639583799446;
     
-    uint256 constant IC24x = 20670411244417205987651144890287238823252044859766116589587849319659930576020;
-    uint256 constant IC24y = 4133276491960118982196377463391048567116402878359260589715337179475103012953;
+    uint256 constant IC24x = 15376107650432532562517675238879931109183652385872341741350057207069919760677;
+    uint256 constant IC24y = 12163613282894312110952413452590943793689556977608429079525501424245210898987;
     
-    uint256 constant IC25x = 11873290396192685137835013415574323047485764280626338216565341679755551025860;
-    uint256 constant IC25y = 12967339602191673077436085385721921209420258192841305076699707516014384891833;
+    uint256 constant IC25x = 21087166981062958259825865347134564875926186819875767696568317823488336917896;
+    uint256 constant IC25y = 15762649107811141917603699122632018793639916612208894025714649072338044075586;
     
-    uint256 constant IC26x = 8722562645683043684977525210303435818794730683804614126410526744555789445691;
-    uint256 constant IC26y = 3733335959922112826231816476983551582911689623355018255538518487929075955324;
+    uint256 constant IC26x = 5120686049886825058445452951254266343462561773672356770732157430858330491691;
+    uint256 constant IC26y = 11046045856891422237147253594749318345951196586790871800156338688334664797048;
     
-    uint256 constant IC27x = 21128822465289532888178996194120275157455110348172748700223877051653750010740;
-    uint256 constant IC27y = 2522087472804230196974530239605528740445508102391810098239899467574390210268;
+    uint256 constant IC27x = 11116873825396655991389216659269585145620200225791557320551530972352228098831;
+    uint256 constant IC27y = 3271191376177107978938083722391105421120848315078198802353087459617997426104;
     
-    uint256 constant IC28x = 10679332869035673522095223301016276628874210520432573383790817618596612840791;
-    uint256 constant IC28y = 21289476335671209652697757092889181257920390864749735231142693162452929062588;
+    uint256 constant IC28x = 21019143498004400903259766749142372667153376608389483897878881810132865116542;
+    uint256 constant IC28y = 20058271295969084519220780794685774075235178554301385873847280275673893710867;
     
-    uint256 constant IC29x = 2609832430615706693504774538081221002572019913967502150235593169909827843502;
-    uint256 constant IC29y = 14714825072402253083785438274492932618889111283178959924082647535447630873645;
+    uint256 constant IC29x = 3088320503719486244878902559682118797941031906918592703374618231044866477933;
+    uint256 constant IC29y = 7957746217390961233365848173642960838604761579306585693479441876449511811100;
     
-    uint256 constant IC30x = 20929918164496425339272582728245933792174244792045067160369780562856539364887;
-    uint256 constant IC30y = 21829219789149398038858444958354547306990203732219354012225836377080727840073;
+    uint256 constant IC30x = 9265264187620997738961784598279326190924030246353391735448996655308762594393;
+    uint256 constant IC30y = 12870913899766817882209478409287941761615618579244334984219588810560763939529;
     
-    uint256 constant IC31x = 11468462742517897163877881619962635757099976261156385873481574589621371244378;
-    uint256 constant IC31y = 8851282702481151749086812126053513960512762416431420501529059283345919393681;
-    
-    uint256 constant IC32x = 16597903527154606469004098702646630646876098326443455720293607746691316479676;
-    uint256 constant IC32y = 6865378811596695553676917046222081530105365855806005223865134455501995569693;
+    uint256 constant IC31x = 5254797586690949845864066912241731823062919857632449946826426119537257133607;
+    uint256 constant IC31y = 6442862733198819845417622717002423202646999126954588221448840906596194569308;
     
  
     // Memory data
@@ -149,7 +146,7 @@ contract Groth16Verifier_AnonNullifierTransferLockedBatch {
 
     uint16 constant pLastMem = 896;
 
-    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[32] calldata _pubSignals) public view returns (bool) {
+    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[31] calldata _pubSignals) public view returns (bool) {
         assembly {
             function checkField(v) {
                 if iszero(lt(v, r)) {
@@ -255,8 +252,6 @@ contract Groth16Verifier_AnonNullifierTransferLockedBatch {
                 
                 g1_mulAccC(_pVk, IC31x, IC31y, calldataload(add(pubSignals, 960)))
                 
-                g1_mulAccC(_pVk, IC32x, IC32y, calldataload(add(pubSignals, 992)))
-                
 
                 // -A
                 mstore(_pPairing, calldataload(pA))
@@ -372,8 +367,6 @@ contract Groth16Verifier_AnonNullifierTransferLockedBatch {
             
             checkField(calldataload(add(_pubSignals, 960)))
             
-            checkField(calldataload(add(_pubSignals, 992)))
-            
 
             // Validate all evaluations
             let isValid := checkPairing(_pA, _pB, _pC, _pubSignals, pMem)

package/contracts/verifiers/impl/burn.sol

@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: GPL-3.0
+/*
+    Copyright 2021 0KIMS association.
+
+    This file is generated with [snarkJS](https://github.com/iden3/snarkjs).
+
+    snarkJS is a free software: you can redistribute it and/or modify it
+    under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    snarkJS is distributed in the hope that it will be useful, but WITHOUT
+    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+    or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
+    License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with snarkJS. If not, see <https://www.gnu.org/licenses/>.
+*/
+
+pragma solidity >=0.7.0 <0.9.0;
+
+contract Verifier_Burn {
+    // Scalar field size
+    uint256 constant r    = 21888242871839275222246405745257275088548364400416034343698204186575808495617;
+    // Base field size
+    uint256 constant q   = 21888242871839275222246405745257275088696311157297823662689037894645226208583;
+
+    // Verification Key data
+    uint256 constant alphax  = 20491192805390485299153009773594534940189261866228447918068658471970481763042;
+    uint256 constant alphay  = 9383485363053290200918347156157836566562967994039712273449902621266178545958;
+    uint256 constant betax1  = 4252822878758300859123897981450591353533073413197771768651442665752259397132;
+    uint256 constant betax2  = 6375614351688725206403948262868962793625744043794305715222011528459656738731;
+    uint256 constant betay1  = 21847035105528745403288232691147584728191162732299865338377159692350059136679;
+    uint256 constant betay2  = 10505242626370262277552901082094356697409835680220590971873171140371331206856;
+    uint256 constant gammax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
+    uint256 constant gammax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
+    uint256 constant gammay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
+    uint256 constant gammay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
+    uint256 constant deltax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
+    uint256 constant deltax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
+    uint256 constant deltay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
+    uint256 constant deltay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
+
+    
+    uint256 constant IC0x = 14207649465847074459006551899801105360344045193984915354386078270967717414662;
+    uint256 constant IC0y = 14203847703207394749659860962890233765723282136337244239517265306071139670341;
+    
+    uint256 constant IC1x = 20991582431635387746090800929038448868620958869834707086238456083408640908280;
+    uint256 constant IC1y = 10783061735315001386299657272927752303784112081871401453945754602227431478666;
+    
+    uint256 constant IC2x = 14006692811194189103148787387025604948395366969003356155170114368180461113393;
+    uint256 constant IC2y = 5673528144716202191549186015609073881678333688057753432182528489420085303744;
+    
+    uint256 constant IC3x = 6162733910454695011371515613073936194378338628226525781838980758673160026926;
+    uint256 constant IC3y = 9898958851889443370118359024776281414454075518118600633160570171981761207967;
+    
+ 
+    // Memory data
+    uint16 constant pVk = 0;
+    uint16 constant pPairing = 128;
+
+    uint16 constant pLastMem = 896;
+
+    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[3] calldata _pubSignals) public view returns (bool) {
+        assembly {
+            function checkField(v) {
+                if iszero(lt(v, r)) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+            }
+            
+            // G1 function to multiply a G1 value(x,y) to value in an address
+            function g1_mulAccC(pR, x, y, s) {
+                let success
+                let mIn := mload(0x40)
+                mstore(mIn, x)
+                mstore(add(mIn, 32), y)
+                mstore(add(mIn, 64), s)
+
+                success := staticcall(sub(gas(), 2000), 7, mIn, 96, mIn, 64)
+
+                if iszero(success) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+
+                mstore(add(mIn, 64), mload(pR))
+                mstore(add(mIn, 96), mload(add(pR, 32)))
+
+                success := staticcall(sub(gas(), 2000), 6, mIn, 128, pR, 64)
+
+                if iszero(success) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+            }
+
+            function checkPairing(pA, pB, pC, pubSignals, pMem) -> isOk {
+                let _pPairing := add(pMem, pPairing)
+                let _pVk := add(pMem, pVk)
+
+                mstore(_pVk, IC0x)
+                mstore(add(_pVk, 32), IC0y)
+
+                // Compute the linear combination vk_x
+                
+                g1_mulAccC(_pVk, IC1x, IC1y, calldataload(add(pubSignals, 0)))
+                
+                g1_mulAccC(_pVk, IC2x, IC2y, calldataload(add(pubSignals, 32)))
+                
+                g1_mulAccC(_pVk, IC3x, IC3y, calldataload(add(pubSignals, 64)))
+                
+
+                // -A
+                mstore(_pPairing, calldataload(pA))
+                mstore(add(_pPairing, 32), mod(sub(q, calldataload(add(pA, 32))), q))
+
+                // B
+                mstore(add(_pPairing, 64), calldataload(pB))
+                mstore(add(_pPairing, 96), calldataload(add(pB, 32)))
+                mstore(add(_pPairing, 128), calldataload(add(pB, 64)))
+                mstore(add(_pPairing, 160), calldataload(add(pB, 96)))
+
+                // alpha1
+                mstore(add(_pPairing, 192), alphax)
+                mstore(add(_pPairing, 224), alphay)
+
+                // beta2
+                mstore(add(_pPairing, 256), betax1)
+                mstore(add(_pPairing, 288), betax2)
+                mstore(add(_pPairing, 320), betay1)
+                mstore(add(_pPairing, 352), betay2)
+
+                // vk_x
+                mstore(add(_pPairing, 384), mload(add(pMem, pVk)))
+                mstore(add(_pPairing, 416), mload(add(pMem, add(pVk, 32))))
+
+
+                // gamma2
+                mstore(add(_pPairing, 448), gammax1)
+                mstore(add(_pPairing, 480), gammax2)
+                mstore(add(_pPairing, 512), gammay1)
+                mstore(add(_pPairing, 544), gammay2)
+
+                // C
+                mstore(add(_pPairing, 576), calldataload(pC))
+                mstore(add(_pPairing, 608), calldataload(add(pC, 32)))
+
+                // delta2
+                mstore(add(_pPairing, 640), deltax1)
+                mstore(add(_pPairing, 672), deltax2)
+                mstore(add(_pPairing, 704), deltay1)
+                mstore(add(_pPairing, 736), deltay2)
+
+
+                let success := staticcall(sub(gas(), 2000), 8, _pPairing, 768, _pPairing, 0x20)
+
+                isOk := and(success, mload(_pPairing))
+            }
+
+            let pMem := mload(0x40)
+            mstore(0x40, add(pMem, pLastMem))
+
+            // Validate that all evaluations ∈ F
+            
+            checkField(calldataload(add(_pubSignals, 0)))
+            
+            checkField(calldataload(add(_pubSignals, 32)))
+            
+            checkField(calldataload(add(_pubSignals, 64)))
+            
+
+            // Validate all evaluations
+            let isValid := checkPairing(_pA, _pB, _pC, _pubSignals, pMem)
+
+            mstore(0, isValid)
+             return(0, 0x20)
+         }
+     }
+ }

package/contracts/verifiers/impl/burn_batch.sol

@@ -0,0 +1,238 @@
+// SPDX-License-Identifier: GPL-3.0
+/*
+    Copyright 2021 0KIMS association.
+
+    This file is generated with [snarkJS](https://github.com/iden3/snarkjs).
+
+    snarkJS is a free software: you can redistribute it and/or modify it
+    under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    snarkJS is distributed in the hope that it will be useful, but WITHOUT
+    ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+    or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
+    License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with snarkJS. If not, see <https://www.gnu.org/licenses/>.
+*/
+
+pragma solidity >=0.7.0 <0.9.0;
+
+contract Verifier_BurnBatch {
+    // Scalar field size
+    uint256 constant r    = 21888242871839275222246405745257275088548364400416034343698204186575808495617;
+    // Base field size
+    uint256 constant q   = 21888242871839275222246405745257275088696311157297823662689037894645226208583;
+
+    // Verification Key data
+    uint256 constant alphax  = 20491192805390485299153009773594534940189261866228447918068658471970481763042;
+    uint256 constant alphay  = 9383485363053290200918347156157836566562967994039712273449902621266178545958;
+    uint256 constant betax1  = 4252822878758300859123897981450591353533073413197771768651442665752259397132;
+    uint256 constant betax2  = 6375614351688725206403948262868962793625744043794305715222011528459656738731;
+    uint256 constant betay1  = 21847035105528745403288232691147584728191162732299865338377159692350059136679;
+    uint256 constant betay2  = 10505242626370262277552901082094356697409835680220590971873171140371331206856;
+    uint256 constant gammax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
+    uint256 constant gammax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
+    uint256 constant gammay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
+    uint256 constant gammay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
+    uint256 constant deltax1 = 11559732032986387107991004021392285783925812861821192530917403151452391805634;
+    uint256 constant deltax2 = 10857046999023057135944570762232829481370756359578518086990519993285655852781;
+    uint256 constant deltay1 = 4082367875863433681332203403145435568316851327593401208105741076214120093531;
+    uint256 constant deltay2 = 8495653923123431417604973247489272438418190587263600148770280649306958101930;
+
+    
+    uint256 constant IC0x = 7631257906107650252600145723888878222116317244029552711162468092756937492692;
+    uint256 constant IC0y = 21533439902964678059972645672295063253017913469233699615769382673890163442989;
+    
+    uint256 constant IC1x = 1452116139955566603194478923716910101802496934152744867265527791250404038823;
+    uint256 constant IC1y = 6673542924818916509202846631770828428780632369731800323285779288715125663589;
+    
+    uint256 constant IC2x = 7420056446893507736984550520579335657278263462589586131787103166599640463478;
+    uint256 constant IC2y = 15975062804917941696207231021230248919824358958350174816797234388427655512882;
+    
+    uint256 constant IC3x = 3671066312224999073665280455061768923412039416115707772601043596926286431278;
+    uint256 constant IC3y = 2677952671086594665255013146125932150995484950543368552641379515907256501003;
+    
+    uint256 constant IC4x = 20773542083028731773382992271757996563109613809271335566652212304600047070091;
+    uint256 constant IC4y = 4127534931003107599356004838413250277935814851296724893875709823794065306505;
+    
+    uint256 constant IC5x = 10341004646478092931355681616660382693902678512482677938125005887124316152765;
+    uint256 constant IC5y = 7923464261944844839205065292580326683188404716466262258956809956184590021761;
+    
+    uint256 constant IC6x = 6779471029284756918162956883720127063236000026616043850873659326220351759164;
+    uint256 constant IC6y = 3363099043577458891348004651430331031933902732546825484112862780494882706345;
+    
+    uint256 constant IC7x = 3643583922845363299324866982994565910128232221293173155892149319988212291914;
+    uint256 constant IC7y = 19361444849011000229658521500930422347828327395570485178056706722338361925130;
+    
+    uint256 constant IC8x = 13770709707251326390999117178934284613506760387725864815634125535930222646522;
+    uint256 constant IC8y = 21800266370933077493571039770074679032281564373672646405217493746190607957218;
+    
+    uint256 constant IC9x = 5806904013223972450761771117316723363768298169000699993638559554524950945770;
+    uint256 constant IC9y = 18543558357419593215531073075248309048964681146029999482511740458059720449689;
+    
+    uint256 constant IC10x = 18320219688608829968075030384893825876458562520853056684465492113328876872578;
+    uint256 constant IC10y = 13479039050249889368250244419835364693499574538369869489319903643150801464206;
+    
+    uint256 constant IC11x = 851671849735031126345893979530598322453966429040751705913475255243208778752;
+    uint256 constant IC11y = 10153380221453105148515421084979735587724520574654009426957875693321035012414;
+    
+ 
+    // Memory data
+    uint16 constant pVk = 0;
+    uint16 constant pPairing = 128;
+
+    uint16 constant pLastMem = 896;
+
+    function verifyProof(uint[2] calldata _pA, uint[2][2] calldata _pB, uint[2] calldata _pC, uint[11] calldata _pubSignals) public view returns (bool) {
+        assembly {
+            function checkField(v) {
+                if iszero(lt(v, r)) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+            }
+            
+            // G1 function to multiply a G1 value(x,y) to value in an address
+            function g1_mulAccC(pR, x, y, s) {
+                let success
+                let mIn := mload(0x40)
+                mstore(mIn, x)
+                mstore(add(mIn, 32), y)
+                mstore(add(mIn, 64), s)
+
+                success := staticcall(sub(gas(), 2000), 7, mIn, 96, mIn, 64)
+
+                if iszero(success) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+
+                mstore(add(mIn, 64), mload(pR))
+                mstore(add(mIn, 96), mload(add(pR, 32)))
+
+                success := staticcall(sub(gas(), 2000), 6, mIn, 128, pR, 64)
+
+                if iszero(success) {
+                    mstore(0, 0)
+                    return(0, 0x20)
+                }
+            }
+
+            function checkPairing(pA, pB, pC, pubSignals, pMem) -> isOk {
+                let _pPairing := add(pMem, pPairing)
+                let _pVk := add(pMem, pVk)
+
+                mstore(_pVk, IC0x)
+                mstore(add(_pVk, 32), IC0y)
+
+                // Compute the linear combination vk_x
+                
+                g1_mulAccC(_pVk, IC1x, IC1y, calldataload(add(pubSignals, 0)))
+                
+                g1_mulAccC(_pVk, IC2x, IC2y, calldataload(add(pubSignals, 32)))
+                
+                g1_mulAccC(_pVk, IC3x, IC3y, calldataload(add(pubSignals, 64)))
+                
+                g1_mulAccC(_pVk, IC4x, IC4y, calldataload(add(pubSignals, 96)))
+                
+                g1_mulAccC(_pVk, IC5x, IC5y, calldataload(add(pubSignals, 128)))
+                
+                g1_mulAccC(_pVk, IC6x, IC6y, calldataload(add(pubSignals, 160)))
+                
+                g1_mulAccC(_pVk, IC7x, IC7y, calldataload(add(pubSignals, 192)))
+                
+                g1_mulAccC(_pVk, IC8x, IC8y, calldataload(add(pubSignals, 224)))
+                
+                g1_mulAccC(_pVk, IC9x, IC9y, calldataload(add(pubSignals, 256)))
+                
+                g1_mulAccC(_pVk, IC10x, IC10y, calldataload(add(pubSignals, 288)))
+                
+                g1_mulAccC(_pVk, IC11x, IC11y, calldataload(add(pubSignals, 320)))
+                
+
+                // -A
+                mstore(_pPairing, calldataload(pA))
+                mstore(add(_pPairing, 32), mod(sub(q, calldataload(add(pA, 32))), q))
+
+                // B
+                mstore(add(_pPairing, 64), calldataload(pB))
+                mstore(add(_pPairing, 96), calldataload(add(pB, 32)))
+                mstore(add(_pPairing, 128), calldataload(add(pB, 64)))
+                mstore(add(_pPairing, 160), calldataload(add(pB, 96)))
+
+                // alpha1
+                mstore(add(_pPairing, 192), alphax)
+                mstore(add(_pPairing, 224), alphay)
+
+                // beta2
+                mstore(add(_pPairing, 256), betax1)
+                mstore(add(_pPairing, 288), betax2)
+                mstore(add(_pPairing, 320), betay1)
+                mstore(add(_pPairing, 352), betay2)
+
+                // vk_x
+                mstore(add(_pPairing, 384), mload(add(pMem, pVk)))
+                mstore(add(_pPairing, 416), mload(add(pMem, add(pVk, 32))))
+
+
+                // gamma2
+                mstore(add(_pPairing, 448), gammax1)
+                mstore(add(_pPairing, 480), gammax2)
+                mstore(add(_pPairing, 512), gammay1)
+                mstore(add(_pPairing, 544), gammay2)
+
+                // C
+                mstore(add(_pPairing, 576), calldataload(pC))
+                mstore(add(_pPairing, 608), calldataload(add(pC, 32)))
+
+                // delta2
+                mstore(add(_pPairing, 640), deltax1)
+                mstore(add(_pPairing, 672), deltax2)
+                mstore(add(_pPairing, 704), deltay1)
+                mstore(add(_pPairing, 736), deltay2)
+
+
+                let success := staticcall(sub(gas(), 2000), 8, _pPairing, 768, _pPairing, 0x20)
+
+                isOk := and(success, mload(_pPairing))
+            }
+
+            let pMem := mload(0x40)
+            mstore(0x40, add(pMem, pLastMem))
+
+            // Validate that all evaluations ∈ F
+            
+            checkField(calldataload(add(_pubSignals, 0)))
+            
+            checkField(calldataload(add(_pubSignals, 32)))
+            
+            checkField(calldataload(add(_pubSignals, 64)))
+            
+            checkField(calldataload(add(_pubSignals, 96)))
+            
+            checkField(calldataload(add(_pubSignals, 128)))
+            
+            checkField(calldataload(add(_pubSignals, 160)))
+            
+            checkField(calldataload(add(_pubSignals, 192)))
+            
+            checkField(calldataload(add(_pubSignals, 224)))
+            
+            checkField(calldataload(add(_pubSignals, 256)))
+            
+            checkField(calldataload(add(_pubSignals, 288)))
+            
+            checkField(calldataload(add(_pubSignals, 320)))
+            
+
+            // Validate all evaluations
+            let isValid := checkPairing(_pA, _pB, _pC, _pubSignals, pMem)
+
+            mstore(0, isValid)
+             return(0, 0x20)
+         }
+     }
+ }