Crate delegatable_credentials

Modules

• accumulator
• error
• mercurial_sig
  Mercurial signatures as defined in section 3 of this paper. Implements 2 variations of the algorithms, one where signature is in group G1 and public key in group G2 and the other where signature is in group G2 and public key in group G1
• msbm
  Based on the paper Practical Delegatable Anonymous Credentials From Equivalence Class Signatures
• one_of_n_proof
• protego
• set_commitment
  Set commitment scheme (SCDS) as defined in Fig.2 of this paper Aggregation is taken from section 3.4 of this paper The set commitment is a KZG polynomial commitment to a monic polynomial whose roots are the set members. The above paper defines the characteristic polynomial of a set as (x+a1)*(x+a2)*(x+a3)*.. but this implementation is using (x-a1)*(x-a2)*(x-a3)*.. for set members a1, a2, ... to reuse existing code
• util