EIP-7951 DNSSEC Solutions
The EIP-7951 P-256 precompile enables efficient on-chain DNSSEC verification, reducing gas costs by up to 99x for Algorithm 13 signatures. Explore two optimized approaches: gasless resolution for end users and gas-optimized on-chain import for domain registration.
Gasless DNSSEC Resolution
Demonstrates gasless DNSSEC resolution by combining CCIP-Read (EIP-3668) with the P-256 precompile (EIP-7951) for efficient on-chain verification. DNSSEC proofs are fetched off-chain via gateway and verified on-chain using the P-256 precompile, enabling zero-gas resolution of DNS-verified ENS records.
DNSSEC Onchain Import
Demonstrates on-chain DNSSEC import with gas cost analysis. Fetches proofs from _ens.{domain} TXT records, estimates gas costs, and enables on-chain verification via our P-256 enabled oracle, with side-by-side comparison against the current ENS implementation.
TLD Oracle
SepoliaDNS-verified TLD minting for ENS. Allows DNS registries to claim their TLDs (like .link, .gift) in ENS by providing DNSSEC proofs, with a timelock and DAO veto mechanism to preserve governance sovereignty.
How EIP-7951 Optimizes DNSSEC
Cheaper P-256 Verification
P-256 signature verification reduced from 1.3M gas to ~13k gas using the precompile
Total Gas Savings
Overall transaction costs reduced from 3.4M gas to 540k gas for DNSSEC imports
Trust Anchor Pinning
Demonstrates that 2LD-level trust anchor pinning is practical, enabled by the P-256 precompile's efficiency. CCIP-Read makes resolution gasless for end users.