ebfull
ebfull
@L-as You do need the `Circuit` though note that you don't need an instance of the circuit. This is because the `Circuit` implementation instructs the verifier about how it should...
Not sure if the problem is in https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=zcash-bin or the `zcash` package: https://archlinux.org/packages/community/x86_64/zcash/
The repository has git submodules you will need to clone in order to perform the build. :)
The ISOs will not be the same due to timestamps. Use `diffoscope` to compare the two -- it will show those are the only differences. (Along with signatures of the...
I'll leave this open until you succeed, and fix documentation based on your experience.
The way this verifier will work is it will read from a proof string via some transcript interface and look almost identical to the verifier outside the circuit in terms...
Try to compile this with `rustc 1.12.1`.
So, from a security perspective there doesn't seem to be any good reason to choose MiMC for the merkle tree. If discrete log is broken, counterfeiting can occur. If collision...
> Note that the modulus of the field for the inner curve is constrained, and so we cannot trivially dismiss any concern that it might not be as secure. The...
@daira Would you mind writing a little constraint-system mockup of the _best_ MiMC variant you can construct for the BLS curve and I'll post some benchmarks?