Crate delegatable_credentials 

Modules

accumulator

error

mercurial_sig

Mercurial signatures as defined in section 3 of this paper. Implements 2 variations of the algorithms, one where signature is in group G1 and public key in group G2 and the other where signature is in group G2 and public key in group G1

msbm

Based on the paper Practical Delegatable Anonymous Credentials From Equivalence Class Signatures

one_of_n_proof

protego

set_commitment

Set commitment scheme (SCDS) as defined in Fig.2 of this paper Aggregation is taken from section 3.4 of this paper The set commitment is a KZG polynomial commitment to a monic polynomial whose roots are the set members. The above paper defines the characteristic polynomial of a set as (x+a1)*(x+a2)*(x+a3)*.. but this implementation is using (x-a1)*(x-a2)*(x-a3)*.. for set members a1, a2, ... to reuse existing code

util