Crate compressed_sigma

source ·

Modules

  • Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”. This is for the relation R_{AMOREXP} where a single homomorphism is applied over many witness vectors and there is a separate commitment to each witness vector.
  • Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”. This is for the relation R_{AMORHOM} where a many homomorphisms are applied over a single witness vector and there is a commitment to the witness vector.
  • Amortized sigma protocol as described in Appendix B of the paper “Compressed Sigma Protocol Theory…”
  • Compressed sigma protocol with homomorphism as described in section 3 of the paper “Compressing Proofs of k-Out-Of-n”.
  • Compressed sigma protocol as described as Protocol 5 of the paper “Compressed Sigma Protocol Theory…”
  • Proof of partial knowledge protocol as described in section 4 of the paper “Compressing Proofs of k-Out-Of-n”. Implements both for single witness DLs and DLs involving witness vector
  • For STROBE (used in merlin) sponge (from ark-sponge) Sponge construction takes in arbitrary length input vector and outputs the desired number of outputs (output)