Number of constraints of ECDSA signature verification

[jeljelih]

I would like to benchmark ECDSA signature verification.
In go package https://pkg.go.dev/github.com/consensys/gnark/std/signature/ecdsa it is reported that 'The cost for a single secp256k1 signature verification is approximately 4M constraints in R1CS'
However when I followed this test file https://github.com/Consensys/gnark/blob/master/std/signature/ecdsa/ecdsa_secpr_test.go to implement signature verification on both p256 and p384 I obtained respectively 293813 and 564007 which is much lower than the expected 4M constraints.
Btw, I compiled the circuit for BN254.
Can you please point to me where the difference can come from?

[yelhousni]

The documentation should be updated. We've been merging many optimizations into master branch and as of today 'The cost for a single secp256k1 signature verification is 122458 constraints in R1CS and 453838 in Plonkish'. So your numbers should be coherent. Thanks for reporting, I will update the comment.

[yelhousni]

fixed #1113