- BLS12-381 (Zcash)
- BN254 (Ethereum)
- BLS12-377 (ZEXE)
- BW6-761 (EC supporting pairing on BLS12-377 field of definition)
- BLS24-315
- BW6-633 (EC supporting pairing on BLS24-315 field of definition)
- BLS12-378 (GT-strong SNARK-friendly)
- BW6-756 (EC supporting pairing on BLS12-378 field of definition)
Each of these curve has a twistededwards
sub-package with its companion curve. In particular, BLS12-381 comapnion curve is known as Jubjub and BN254's Baby-Jubjub.
They are of particular interest as they allow efficient elliptic curve cryptography inside zkSNARK circuits.