$$ ax^2+y^2 = 1 + dx^2y^2 $$

Only is SNARK friendly if a is quadratic residue and d is non quadratic residue

What is different

• We dont need to represent the point of infinity in affine representation. (0,1) is the point at infinity.

Every Twisted Edwards curve is isomorphic to a Montgomery curve