Issue moved from https://github.com/zkcrypto/ff/issues/139 because it was in the wrong repository. You may read it first for context.