SNARK-friendliness?

[weikengchen]

cc'ed @weijiekoh

Recall that the method used here is the Wahby-Boneh map, which, if an isogeny map can be found (which needs luck), then works and can provide fast computation of the map.

I am wondering if such a map is also most efficient when we consider SNARK-friendliness, as in the use case of PLUME. Basically, since in the SNARK world, some computation, such as the Legendre symbol and square roots, are fairly cheap. I wonder if this suggests that the general-purpose SW map may have an advantage, or so.

[weikengchen]

We also do not know if there is an unexplored map (i.e., discarded very early on in that line of research) that heavily based on the Legendre symbol and square roots, is indeed very verification-efficient, and is more SNARK-friendly than all the ones that we are discussing today.