A multiexp implementation for ff/group implementing Straus and Pippenger. A batch verification API is also available via the "batch" feature, which enables secure multiexponentiation batch verification given a series of values which should sum to the identity, identifying which doesn't via binary search if they don't.

This library was audited by Cypher Stack in March 2023, culminating in commit 669d2dbffc1dafb82a09d9419ea182667115df06. Any subsequent changes have not undergone auditing.

This library is usable under no-std and no-alloc. With the alloc feature, the library is fully functional. Without the alloc feature, the multiexp function is shimmed with a serial implementation.