Struct Transcript 

pub struct Transcript(/* private fields */);

Transcript wrapper for Fiat-Shamir transformation.

Provides domain-separated, transcript-based challenge generation using Merlin.

Implementations

impl Transcript

pub fn new() -> Self

Creates a new transcript for the Chaum-Pedersen protocol.

pub fn append_context(&mut self, context: &[u8])

Appends application-specific context to prevent cross-protocol attacks.

Security

This should be called before generating proofs in application-specific contexts to ensure proofs from one context cannot be replayed in another. Examples: session ID, domain separator, purpose string.

pub fn append_parameters(&mut self, generator_g: &[u8], generator_h: &[u8])

Appends protocol parameters (generators) to the transcript.

pub fn append_statement(&mut self, y1: &[u8], y2: &[u8])

Appends the statement (public values) to the transcript.

pub fn append_commitment(&mut self, r1: &[u8], r2: &[u8])

Appends the commitment values to the transcript.

pub fn challenge_scalar(&mut self) -> Scalar

Generates a challenge scalar for Ristretto255.

Uses wide reduction (64 bytes) to ensure uniform distribution.

Trait Implementations

impl Default for Transcript

fn default() -> Self

Returns the “default value” for a type.