Consensys Integrates Divide-and-Pair Into gnark-crypto Library
The method targets subgroup checks used to guard against small-subgroup attacks on curves such as Curve25519. Its paper is scheduled for CHES 2027.

Consensys has added Divide-and-Pair to gnark-crypto to speed up subgroup checks that help protect elliptic-curve cryptography from small-subgroup attacks on non-prime-order curves such as Curve25519.
The approximate speedups listed for Divide-and-Pair were 1.6× on Curve25519, 1.3× on Curve448, 1.4× on GC256A, 10.8× on FourQ and 7× on Jubjub.
Consensys cryptographer Youssef El Housni collaborated with researchers on the method. gnark-crypto is used by Besu, Linea and Geth, as well as systems built on gnark, including Succinct and Lighter.
The paper was accepted by IACR TCHES and is scheduled for publication at the CHES 2027 conference.