Feat: Add BLS signature scheme

[yelhousni]

No description provided.

[yelhousni]

Needs #312 and #313 to be merged

[sandritis2]

[samlaf]

Any ETA on when you guys think this is going to get merged?

[yelhousni]

Any ETA on when you guys think this is going to get merged?

The scheme is pretty much implemented (just need to be rebased on top of last master). The PR review was delayed because of other high priority work (Linea related) popped up. I hope we can go back to this soon!

[samlaf]

Been playing with this library a bit. I'm curious, why is there no aggregation function on PublicKey and Signature structs? The only way I could find to do aggregation was this clumsy way:

func main() {
	msg := []byte("testing BLS aggregation")

	sk1, _ := bls.GenerateKey(rand.Reader)
	pk1 := sk1.PublicKey
	sig1Bytes, _ := sk1.Sign(msg, nil)
	sig1 := new(bls.Signature)
	_, err := sig1.SetBytes(sig1Bytes)
	if err != nil {
		panic(err)
	}

	sk2, _ := bls.GenerateKey(rand.Reader)
	pk2 := sk2.PublicKey
	sig2Bytes, _ := sk2.Sign(msg, nil)
	sig2 := new(bls.Signature)
	_, err = sig2.SetBytes(sig2Bytes)
	if err != nil {
		panic(err)
	}

	aggPk := new(bls.PublicKey)
	aggPk.A.Set(pk1.A.Add(&pk1.A, &pk2.A))
	aggSig := new(bls.Signature)
	aggSig.S.Set(sig1.S.Add(&sig1.S, &sig2.S))

	ok, err := aggPk.Verify(aggSig.Bytes(), msg, nil)
	if err != nil {
		panic(err)
	}
	fmt.Println("Signature verified?", ok)
}

Am I doing something wrong?

[dB2510]

@yelhousni is this PR abandoned? if not any ETA when will it get merged?

[yelhousni]

@yelhousni is this PR abandoned? if not any ETA when will it get merged?

Sorry we forgot about this PR because of other prioritized work. Is it something that you guys are using? Would someone be willing to contribute rebasing and cleaning it in gnark-crypto?

[gbotrel]

Review pass from 2026-05-07.

Findings:

• Blocking: GitHub currently reports this PR as mergeable=CONFLICTING / mergeStateStatus=DIRTY, and there is no current CI signal on the PR head.
• Blocking stack dependency: the PR discussion says this needs pre-hashed message in ECDSA and EdDSA #312 and Feat: Add Schnorr signature scheme #313. Feat: Add Schnorr signature scheme #313 is still conflict-marked and has unresolved requested changes around Schnorr key leakage/forgeability/API design, so this BLS PR should be rebased and reviewed only after the dependency stack is cleaned up.

Verification run locally:

• go test ./signature/... (top-level signature packages have no tests)
• go test ./ecc/.../signature/...