Package bn256 implements a particular bilinear group at the 128-bit security level.

utils.mapInto = (seed) => { // seed is flattened 0x + hex string var seed_red = new BN(seed.slice(2), 16).toRed(bn128.p); var p_1_4 = bn128.curve.p.add(new BN(1)).div(new BN(4)); while (true) { var y_squared = seed_red.redPow(new BN(3)).redAdd(new BN(3).toRed(bn128.p)); var y = y_squared.redPow(p_1_4); if (y.redPow(new BN(2)).eq(y_squared)) { return bn128.curve.point(seed_red.fromRed(), y.fromRed()); } seed_red.redIAdd(new BN(1).toRed(bn128.p)); } }; */ seed is flattened 0x + hex string.

just for test with special k.