w3f / schnorrkel

Schnorr VRFs and signatures on the Ristretto group
BSD 3-Clause "New" or "Revised" License
315 stars 94 forks source link

zkp agreement #27

Closed burdges closed 5 years ago

burdges commented 5 years ago

After it stabilizes, we should attempt to conform to the proofs and serializations generated by zkp (medium) whenever its proof serializations require the same space. It should be straightforward to do this using merlin's debug-transcript option.

We can minimize wire format breakage by playing around with variable names, ordering, etc, but some wire format breakage might be unavoidable.

We should probably avoid actually using zkp to generate our proofs or do verification though, because our actual protocol, any security considerations, and all optimizations should be visible here.

burdges commented 5 years ago

I'm tempted not to worry about this because other dalek-ish crates like slingshot do not do so. https://github.com/w3f/schnorrkel/issues/34