Answer to first question is “yes”. (Solving third ?).
Considering the second question :
FCL is not gonna be audited, but has been scrutinized by Base cryptographer’s team. We believe that 7212 is amazing at the current moment, but we also believe that it is too limited to introduce only one curve, while a generic precompile can be introduced for (quasi) no extra cost, leading to several use cases:
Using RIP7696 you can emulate P256, Ed25519, starkcurve, babyjujub, palla, vesta, …
We are now pushing 7696, which can emulate 7212 as a specific case.
-
As a progressive compile in solidity for a lower cost (160K) than FCL(200K) or Daimo (330K).
You will find an example of all wychproof vectors assessment here:
crypto-lib/test/libSCL_ecdsa.t.sol at audit-cryptoexperts · get-smooth/crypto-lib · GitHub -
As a circuit/node implementation: Optimizations are independant of the language (just pure algorithmic), so it is transposable to any circuit/node implementation (of course it requires some work). We are working with a L2 on a tradeoff rn.
RIP7696 solidity implementation is going through 2 independant audits. The first is running right now, ending end of June, before a second one starting 1st July.