In the paper linked below a new technique allow for two hash functions to be combined so that only a circuit friendly hash needs to be computed inside the circuit and a cheaper on-chain hash needs to be computed in the contract.
Tasks
Describe the solution you'd like
Investigate whether this hybrid compression technique could save us gas by allowing Keccak to be used on-chain and whether it could save us constraints in the circuits, by replacing SHA256 with Poseidon.
Investigate whether a variant of this technique could be useful for the public inputs problem.
Definition of done
When is this task complete?
Present the above at a show and tell.
Links
Include relevant links here
https://eprint.iacr.org/2025/1500.pdf