feat: subgroup G1/G2 membership BW6-761 and BLS12-377

[yelhousni]

Description

This PR adds G1 and G2 subgroup memberships for BW6-761. It's up to the user to call these circuits for example before a pairing call.

Type of change

• New feature (non-breaking change which adds functionality)

How has this been tested?

Added new tests for subgroup membership tests.

How has this been benchmarked?

• For BLS12-377:

	G1 curve membership	G2 curve membership	G1 subgroup membership	G2 subgroup membership
SCS	11	32	971	2,267

So a total of 3,280 (without separate equality checks of each sub-circuit) if we want to test all membership for e.g. before a pairing circuit.

• For BW6-761:

	G1 curve membership	G2 curve membership	G1 subgroup membership	G2 subgroup membership
SCS	15,412	15,390	1,210,276	1,210,276

So a total of 2,189,173 (without separate equality checks of each sub-circuit) if we want to test all membership for e.g. before a pairing circuit.

N.B.: note that for KZG verifier we (might) only need G1 membership as G2 points are fixed and corresponding lines pre-computed in the SRS.

Checklist:

• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my fix is effective or that my feature works
• I did not modify files generated from templates
• golangci-lint does not output errors locally
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[ivokub]

Looks good. For sw_bw6761 package we also have doc_test.go for the runnable example. Maybe we can add the group membership test there? Right now we only have a comment that we do not check the membership.

[yelhousni]

Looks good. For sw_bw6761 package we also have doc_test.go for the runnable example. Maybe we can add the group membership test there? Right now we only have a comment that we do not check the membership.

Added 👍