Module transcript 

Fiat–Shamir transcript with domain separation (spec §10.1) and challenge derivation (§10.3).

Structs

Challenge

Deterministic byte stream SHA-256(seed ‖ u32be(ctr)), consumed sequentially.

Transcript

Incremental transcript. Clone yields an independent fork, so a caller can seed a base transcript with the ssid and public parameters and fork it for every proof.

Functions

uint_from_be

Decodes a fixed-length big-endian integer with at least bits of precision.

uint_to_be

Fixed-length big-endian encoding of a non-negative integer.