DNSSEC Onchain Import
Demonstrates on-chain DNSSEC import by fetching proofs from _ens.{domain} TXT records, resolving the record value, and visualizing the complete DNSSEC verification chain. Estimates gas costs and enables on-chain verification via our P-256 enabled oracle (EIP-7951), with side-by-side comparison against the current ENS implementation.
💡 Connect your wallet to Sepolia to estimate gas and verify on-chain.
Gas Comparison: ENS vs Our Oracle
Comparison based on verified on-chain transactions. ENS values from mainnet tx and our values from Sepolia tx.
| Operation | ENS Gas | Our Oracle Gas | Savings | Improvement |
|---|---|---|---|---|
| P-256 Signature Verification | 1,318,189 | 13,267 | 99.0% | 99.4x cheaper |
| RSA Signature Verification | 146,890 | 146,890 | 0.0% | 1.0x (same) |
| Total Transaction | 3,443,914 | 540,007 | 84.3% | 6.4x cheaper |
Key Findings
- • P-256 verification: 99.4x cheaper via EIP-7951 precompile
- • Total transaction: 84% savings (2.9M gas)
- • RSA verification: Same as ENS (no optimization yet)
Technical Details
- • ENS uses pure Solidity
EllipticCurve.sol - • Our oracle uses
EIP-7951P-256 precompile - • Average P-256 gas: ~13,267 (vs 1,318,189 for ENS)
How This Works
1. Fetch Proofs
Queries _ens.{domain} TXT record via Cloudflare DoH
2. Estimate Gas
Simulates verifyRRSet() on Sepolia via eth_estimateGas
3. Verify On-Chain
Submit real transaction to prove the gas savings with EIP-7951