-
Location: [Libera.chat, #monero-community](https://libera.chat/) | [Matrix](https://matrix.to/#/#monero-community:monero.social?via=matrix.org&via=monero.social)
[Instructions for joining the moner…
-
In paper [Halo: Recursive Proof Composition without a Trusted Setup ](https://eprint.iacr.org/2019/1021.pdf), section 3.1:
 | [Matrix](https://matrix.to/#/#monero-community:monero.social?via=matrix.org&via=monero.social)
[Instructions for joining the moner…
-
When using Fiat-Shamir for non-interaction, we need to make sure we're incorporating all the public information we need to into the proof transcript before hashing (this is something implementors are …
-
Hi! :wave:
Thank you for your great work! (Especially all the comments in the code!)
I was looking at how the composite proof system works, especially focusing on BBS+ with LegoGroth16.
From [1]…
-
Location: [Libera.chat, #monero-community](https://libera.chat/) | [Matrix](https://matrix.to/#/#monero-community:monero.social?via=matrix.org&via=monero.social)
[Instructions for joining the moner…
-
zkinterface gives access to a few backends which integrated, by proxy Noir will have access to.
Bulletproofs by Dalek is not generic over any field so it would not be doable at the moment due to th…
-
In order to achieve recursive composition of zk-SNARK proofs we need to somehow verify a proof within the circuit over Fq (the scalar field of the pairing friendly curve), which involves extensive ari…
-
Location: [Libera.chat, #monero-community](https://libera.chat/) | [Matrix](https://matrix.to/#/#monero-community:monero.social?via=matrix.org&via=monero.social)
[Instructions for joining the moner…