Crate compressed_sigma

Modules

amortized_homomorphism

Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”. This is for the relation R_{AMOREXP} where a single homomorphism is applied over many witness vectors and there is a separate commitment to each witness vector.

amortized_homomorphisms

Amortized sigma protocol with homomorphism as described in section 3.4 of the paper “Compressing Proofs of k-Out-Of-n”. This is for the relation R_{AMORHOM} where a many homomorphisms are applied over a single witness vector and there is a commitment to the witness vector.

amortized_linear_form

Amortized sigma protocol as described in Appendix B of the paper “Compressed Sigma Protocol Theory…”

compressed_homomorphism

Compressed sigma protocol with homomorphism as described in section 3 of the paper “Compressing Proofs of k-Out-Of-n”.

compressed_linear_form

Compressed sigma protocol as described as Protocol 5 of the paper “Compressed Sigma Protocol Theory…”

error

partial_knowledge

Proof of partial knowledge protocol as described in section 4 of the paper “Compressing Proofs of k-Out-Of-n”. Implements both for single witness DLs and DLs involving witness vector

sponge

For STROBE (used in merlin) sponge (from ark-sponge) Sponge construction takes in arbitrary length input vector and outputs the desired number of outputs (output)

transforms

utils