BLS12-377

BLS12-377 is the elliptic curve underlying Aleo's entire cryptographic stack. It determines the mathematical properties of the field, group, and scalar types in Leo.

The curve was chosen for its pairing-friendly structure, which enables efficient recursive proof composition - the ability to verify proofs inside other proofs. This is what makes Aleo's deep privacy composition possible.

When you see a field element in Leo, it's an element of the BLS12-377 base field. When you see a group element, it's a point on the curve. The scalar type represents the curve's scalar field.