Consensys Cryptographers Propose Divide-and-Pair Method to Accelerate Elliptic Curve Subgroup Membership Check
This method has been integrated into the open-source library gnark-crypto. The library currently runs on Besu, Linea, go-ethereum, as well as gnark-based systems such as Succinct and Lighter. The related paper has been accepted by the IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) and will be published at CHES 2027.