Home

tl;dr: How to think clearly about domain separation in your protocols.

tl;dr: A primitive much more powerful than Semaphore, that we’d like to build without zkSNARKs.

tl;dr: Trying to organize some thoughts on how to scale nullifier sets.

tl;dr: Notes on WHIR[^ACFY24e].

tl;dr: PIOPs, as originally introduced in the DARK paper[^BFS20]. (Although I think they were kind of already defined in PLONK[^GWC19] and Marlin[^CHMplus19e]?)

tl;dr: Ligero + <?> = Ligerito!

tl;dr: A relaxation of IOPs that is central to hash-based proof systems like FRI, STIR[^ACFY24eSTIR] and WHIR.

tl;dr: IOPs, as introduced in [BCS16][^BCS16].