HaRoLd

This is good news, but I still need to re-read and fully digest the 2019/812 paper. There are other questions which are still outstanding, such as whether or not MiMC...

For reference: * https://twitter.com/kobigurk/status/1163126690324914176?s=20 * http://www.neven.org/papers/schnorr.pdf (Hash Function Requirements for Schnorr Signatures) * https://ed25519.cr.yp.to/eddsa-20150704.pdf (EdDSA for more curves) I'm failing to see any solid argument put-forth by Daira about ROM...

This will be a breaking change, and will invalidate many existing test vectors.

Hi. the code to generate Poseidon EVM contract is at: https://github.com/HarryR/ethsnarks/blob/master/ethsnarks/poseidon/contract.py - it emits raw EVM bytecode rather than Solidity, but could be modified to emit Solidity with mostly inline...

Hi, https://github.com/Ethsnarks/ethsnarks-hashpreimage is an example of how to prove the preimage to hash. The problem with an arbitrary input size is that the zk-snark circuit is fixed sized, you can...

> Bob submits his ZkSNARK-style identity token to the ZkSNARK-style online pharmacy contract which authenticates that he is the correct Bob that matches the one on the prescription token. >...

From [Faster Computation of the Tate Pairing](https://github.com/HarryR/ethsnarks/files/2848589/Faster.Pairing.Computations.on.Curves.with.High-Degree.Twists.pdf): From Theorem 1 (§4,pg6) > Solving the linear system, we get the projective solution * `c_Z2 = X_1 * (Y_1 + 1) *...

From the example code referenced by the paper [Optimal TNFS-secure pairings on elliptic curves with even embedding degree](https://eprint.iacr.org/2018/969.pdf): ```go // -------------------------------------------------------------------- // // File: TAk12D3.rtf [Twisted Ate pairing for twisted...

For pairing computation to be efficient within the zkSNARK circuit the extension fields need to be computable using the base field. From https://eprint.iacr.org/2008/292.pdf § pg 9 - **4.1 The case...

https://github.com/zcash/zcash/issues/3425 https://github.com/matter-labs/Groth16BatchVerifier/blob/master/BatchedGroth16.md https://github.com/zcash/zcash/issues/3924