akattis

The expected behaviour of the POSW process should be to compute the subtree roots from the transactions, as @mengsuenyan mentions above in the table. These should then be fed into...

> I think that if I compute the xor, I can do it in 3 constraints: > z_i = x_i \xor p_i > > final_X = z_i*((X of g_i) -...

For a 3-bit window with Montgomery multiplication, the case where you need to invert to counteract for the H(\rho) is less obvious. For some 3-bit input x_1x_2_3 and \rho_1\rho_2\rho_3 we...

Architecture of the circuit hasn't changed in a way that makes this infeasible. However, I think the tradeoff between engineering time to build this and the upside isn't too great...