Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”.
This is for the relation R_{AMOREXP} where a single homomorphism is applied over many witness vectors and
there is a separate commitment to each witness vector.
Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”.
This is for the relation R_{AMORHOM} where a many homomorphisms are applied over a single witness vector and
there is a commitment to the witness vector.
Amortized sigma protocol as described in Appendix B of the paper “Compressed Sigma Protocol Theory…”
Compressed sigma protocol with homomorphism as described in section 3 of the paper “Compressing Proofs of k-Out-Of-n”.
Compressed sigma protocol as described as Protocol 5 of the paper “Compressed Sigma Protocol Theory…”
Proof of partial knowledge protocol as described in section 4 of the paper “Compressing Proofs of k-Out-Of-n”.
Implements both for single witness DLs and DLs involving witness vector
For STROBE (used in merlin) sponge (from ark-sponge)
Sponge construction takes in arbitrary length input vector and
outputs the desired number of outputs (output)