{"id":"https://openalex.org/W7213498752","doi":"https://doi.org/10.48550/arxiv.2609.18846","title":"Locus: A Framework for Exploring and Optimizing Point Addition Hardware for Zero-Knowledge Proofs","display_name":"Locus: A Framework for Exploring and Optimizing Point Addition Hardware for Zero-Knowledge Proofs","publication_year":2026,"publication_date":"2026-09-16","ids":{"openalex":"https://openalex.org/W7213498752","doi":"https://doi.org/10.48550/arxiv.2609.18846"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2609.18846","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.18846","pdf_url":"https://arxiv.org/pdf/2609.18846","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2609.18846","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5151996557","display_name":"Gaurav Kuwar","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kuwar, Gaurav","raw_affiliation_strings":["New York University Tandon School of Engineering Brooklyn , NY , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Tandon School of Engineering Brooklyn , NY , USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030922237","display_name":"Alhad Daftardar","orcid":"https://orcid.org/0000-0001-8523-6490","observed_orcids":["https://orcid.org/0000-0001-8523-6490"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daftardar, Alhad","raw_affiliation_strings":["New York University Tandon School of Engineering Brooklyn , NY , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Tandon School of Engineering Brooklyn , NY , USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138717840","display_name":"Jianqiao Mo","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mo, Jianqiao","raw_affiliation_strings":["New York University Tandon School of Engineering Brooklyn , NY , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Tandon School of Engineering Brooklyn , NY , USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010950688","display_name":"Siddharth Garg","orcid":"https://orcid.org/0000-0002-6158-9512","observed_orcids":["https://orcid.org/0000-0002-6158-9512"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Garg, Siddharth","raw_affiliation_strings":["New York University Tandon School of Engineering Brooklyn , NY , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Tandon School of Engineering Brooklyn , NY , USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089173037","display_name":"Brandon Reagen","orcid":"https://orcid.org/0000-0002-1932-2750","observed_orcids":["https://orcid.org/0000-0002-1932-2750"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reagen, Brandon","raw_affiliation_strings":["New York University Tandon School of Engineering Brooklyn , NY , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Tandon School of Engineering Brooklyn , NY , USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I57206974"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/point-addition","display_name":"point addition","score":0.6489999890327454},{"id":"https://openalex.org/keywords/elliptic-curves","display_name":"elliptic curves","score":0.8510000109672546},{"id":"https://openalex.org/keywords/zero-knowledge-proofs","display_name":"zero-knowledge proofs","score":0.9900000095367432},{"id":"https://openalex.org/keywords/hardware-acceleration","display_name":"hardware acceleration","score":0.722000002861023},{"id":"https://openalex.org/keywords/asic-design","display_name":"ASIC design","score":0.7250000238418579},{"id":"https://openalex.org/keywords/fpga-implementation","display_name":"FPGA implementation","score":0.9079999923706055},{"id":"https://openalex.org/keywords/design-space-exploration","display_name":"design space exploration","score":0.8330000042915344},{"id":"https://openalex.org/keywords/hardware-optimization","display_name":"hardware optimization","score":0.4650000035762787},{"id":"https://openalex.org/keywords/cryptographic-hardware","display_name":"cryptographic hardware","score":0.44600000977516174},{"id":"https://openalex.org/keywords/proof-generation","display_name":"proof generation","score":0.4189999997615814}],"concepts":[{"id":"https://openalex.org/C68339613","wikidata":"https://www.wikidata.org/wiki/Q1549489","display_name":"Speedup","level":2,"score":0.9089000225067139},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.6984999775886536},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.690500020980835},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.4814000129699707},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.4350000023841858},{"id":"https://openalex.org/C179603306","wikidata":"https://www.wikidata.org/wiki/Q268493","display_name":"Elliptic curve","level":2,"score":0.42969998717308044},{"id":"https://openalex.org/C77390884","wikidata":"https://www.wikidata.org/wiki/Q217302","display_name":"Application-specific integrated circuit","level":2,"score":0.4244000017642975},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.39169999957084656},{"id":"https://openalex.org/C2776221188","wikidata":"https://www.wikidata.org/wiki/Q21072556","display_name":"Design space exploration","level":2,"score":0.38100001215934753},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C84211073","wikidata":"https://www.wikidata.org/wiki/Q117879","display_name":"Floating point","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.35920000076293945},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.3490999937057495},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3093999922275543},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.30079999566078186},{"id":"https://openalex.org/C13164978","wikidata":"https://www.wikidata.org/wiki/Q600158","display_name":"Hardware acceleration","level":3,"score":0.29249998927116394},{"id":"https://openalex.org/C142962650","wikidata":"https://www.wikidata.org/wiki/Q240838","display_name":"Reconfigurable computing","level":3,"score":0.28839999437332153},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.28139999508857727},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27889999747276306},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.26739999651908875}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2609.18846","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.18846","pdf_url":"https://arxiv.org/pdf/2609.18846","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2609.18846","doi":"https://doi.org/10.48550/arxiv.2609.18846","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2609.18846","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2609.18846","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.18846","pdf_url":"https://arxiv.org/pdf/2609.18846","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1281725490","display_name":"CAREER: Architectural Foundations for Practical Privacy-Preserving Computation","funder_award_id":"2340137","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1774535144","display_name":"CIRC: GRAND: Enabling the Next Generation of Cryptographic Computing with Cryptolets","funder_award_id":"2450539","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6671297155","display_name":null,"funder_award_id":"CAREER","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7630734376","display_name":"NeTs: Medium: Energy-Efficient and Reconfigurable Wireless Networks through Hardware-Algorithm Co-Design","funder_award_id":"2504400","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320310728","display_name":"Centre International de Recherche sur le Cancer","ror":"https://ror.org/00v452281"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7213498752.pdf","grobid_xml":"https://content.openalex.org/works/W7213498752.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1498685334","https://openalex.org/W2070239372","https://openalex.org/W2079913403","https://openalex.org/W2883585522","https://openalex.org/W3165659700","https://openalex.org/W4313042292","https://openalex.org/W4381894550","https://openalex.org/W4386859343","https://openalex.org/W4391455296","https://openalex.org/W4393577500","https://openalex.org/W4395106435","https://openalex.org/W4400681761","https://openalex.org/W4402387171","https://openalex.org/W4404134060","https://openalex.org/W4404954873","https://openalex.org/W4405934624","https://openalex.org/W4407863044","https://openalex.org/W4409248630","https://openalex.org/W4411486290","https://openalex.org/W4415285687","https://openalex.org/W7125611256","https://openalex.org/W7133553505"],"related_works":["https://openalex.org/W7223242573","https://openalex.org/W4409248630","https://openalex.org/W4404954873","https://openalex.org/W7163337306","https://openalex.org/W4402387171","https://openalex.org/W7203441360","https://openalex.org/W7223116521","https://openalex.org/W3165659700","https://openalex.org/W4405562068","https://openalex.org/W7077897608"],"abstract_inverted_index":{"Zero-Knowledge":[0],"Proofs":[1],"(ZKPs)":[2],"are":[3],"critical":[4],"for":[5,38],"privacy-preserving":[6],"and":[7,44,53,73,94,141,155],"verifiable":[8],"computation,":[9],"but":[10,36],"their":[11],"cryptographic":[12],"primitives":[13],"impose":[14],"high":[15],"computational":[16],"overheads.":[17],"One":[18],"such":[19],"primitive":[20],"is":[21,173],"point":[22,75],"addition":[23,76],"(PADD)":[24],"on":[25,57,159],"elliptic":[26,42,83],"curves.":[27],"Several":[28],"prior":[29,148,167],"works":[30],"have":[31],"implemented":[32],"PADDs":[33],"in":[34,85],"hardware,":[35],"only":[37],"a":[39,48,68,86,126,137,166],"few":[40],"specific":[41],"curves":[43],"design":[45,50,59,105,123],"points,":[46],"leaving":[47],"large":[49],"space":[51],"unexplored,":[52],"lacking":[54],"systematic":[55,100],"guidance":[56],"hardware":[58],"trade-offs.":[60],"To":[61],"address":[62],"this":[63],"gap,":[64],"we":[65,109],"present":[66],"Locus,":[67,108],"framework":[69,131],"dedicated":[70],"to":[71,147],"optimizing":[72],"exploring":[74,119],"hardware.":[77],"Given":[78],"the":[79,103,111],"parameters":[80],"of":[81,97,102,116],"any":[82],"curve":[84],"supported":[87],"equation":[88],"form,":[89],"Locus":[90,172],"automatically":[91],"generates":[92],"ASIC":[93],"FPGA":[95],"implementations":[96],"PADD,":[98],"enabling":[99],"exploration":[101],"PADD":[104,117,133],"space.":[106],"Using":[107],"conduct":[110],"first":[112],"comprehensive":[113],"hardware-focused":[114],"study":[115],"designs,":[118],"trade-offs":[120],"over":[121,153],"1,000":[122],"points.":[124],"On":[125],"12nm":[127],"technology":[128],"node,":[129],"our":[130],"produces":[132],"designs":[134],"that":[135],"yield":[136],"$2.71\\times$":[138],"geomean":[139,143,151,157],"speedup":[140,152,158],"$3.11\\times$":[142],"area":[144],"reduction":[145],"compared":[146],"ASICs,":[149],"$34.67\\times$":[150],"CPU,":[154],"$3.15\\times$":[156],"end-to-end":[160],"proof":[161],"generation":[162],"when":[163],"integrated":[164],"into":[165],"ZKP":[168],"accelerator":[169],"at":[170,175],"iso-area.":[171],"available":[174],"https://github.com/cryptolets/cryptolets/tree/locus.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-09-18T00:00:00"}