What about M31 arithmetic opcodes for efficient STARK verification on Bitcoin ? Idea: OP_M31ADD, OP_M31SUB, OP_M31MUL, OP_M31INV operating over the M31 Mersenne prime field. OP_CAT too generic ? OP_STARK_VERIFY too narrow ? This is something in between. https://hackmd.io/@abdelhamid/m31-opcodes-bitcoin-stark #bitcoin #starks #zkp