Skip to content

zemse/poseidon2-evm

Repository files navigation

Poseidon2 for EVM

Gas-optimized implementations of the Poseidon2 hash function for the EVM.

Implementation Details

See impl-specific documentation:

Goldilocks support is planned.

Gas Costs

Implementation hash_1 hash_2 hash_3
Yul 20,304 20,304 20,304
Huff 14,845 14,845 14,845

It is recommended to use Yul implementation. Huff is experimental. Pure solidity impl is still kept in this repository for reference, but it costs 200k+ gas.

Deployed Contracts

Contracts are deployed with same address on popular EVM testnets.

BN254 (t=4, Rf=8, Rp=56)

Both contracts have same interface IPoseidon2.

Implementation Address
Yul 0xB2542195Ad96AcfBC962C48A97D7640A9F5386D2
Huff 0xB25421813D7d7B8001BB19d6b70642A277422eff

If you need help deploying the contract on new network, feel free to msg @zemse.

Usage example

Both contracts implement the IPoseidon2 interface and are live at the same address on popular EVM networks (see Deployed Contracts above). Inputs are reduced mod PRIME on-chain, so any uint256 yields a correct, deterministic hash — just point the interface at the address and call it.

// Or import it instead: import {IPoseidon2} from "poseidon2-evm/src/IPoseidon2.sol";
interface IPoseidon2 {
    function hash_1(uint256 x) external pure returns (uint256);
    function hash_2(uint256 x, uint256 y) external pure returns (uint256);
    function hash_3(uint256 x, uint256 y, uint256 z) external pure returns (uint256);
}

contract MyContract {
    IPoseidon2 constant POSEIDON2 = IPoseidon2(0xB2542195Ad96AcfBC962C48A97D7640A9F5386D2);

    function someFunction(uint256 left, uint256 right) external view {
        uint256 result = POSEIDON2.hash_2(left, right);
    }
}

Development

  • Run tests: forge test
  • Generate gas report: ./gas-report.sh
  • Generate yul code: npm run generate:yul
  • Generare huff code: npm run generate:huff

Tests include correctness vectors, fuzz testing against the reference Solidity implementation, and overflow safety checks for the ADDMOD optimization.

Security

Not yet audited. These implementations have not undergone a formal third-party security audit. Review the code before using in production. Also see SECURITY.md.

License

MIT