joe

It seems there is potential to speed up MSM further, also; see: https://github.com/Manta-Network/wasm-zkp-challenge/blob/optimized_pippenger/src/pippenger_msm.rs (above is GPL licensed)

I think there is not any question about using ChaCha20 and BLAKE2b for right now, and unless there is something to debate about it, there are no further decisions to...

The plan is to implement https://eprint.iacr.org/2020/1153.pdf over ChaCha20/BLAKE2b. It would be ideal to write this in an abstract way (perhaps in its own crate) where it can be easily reused....

We probably will need to use the Verifiable Unpredictable Function as described in the Aggregatable DKG paper, since BLS signatures aren't compatible with the group secret key generated by our...

External note_encryption test vectors still need to be updated and also newer clippy is more opinionated

> I guess we need to integrate this branch into anoma/namada first to see whether it integrates nicely and continues to work. I suspect the lack of transparent transaction inputs...

Ah, I didn't upload my local branches of `bellman` and `bls12_381` (it's boring, I just make the necessary fields public) Also the branches are different: joe/embedverifier embeds the `VerifyingKey` (no...

OK, it's better to embed the `VerifyingKey` and not the `PreparedVerifyingKey`. Also, we can cache the prepared value. So we should: 1. Add testing params for `Convert` circuit (can be...

I was waiting to merge the current state of https://github.com/murisi/masp/tree/murisi/masp-transaction3 into that commit (basically, I was trying to update the note encryption to be in sync with the latest librustzcash)...

OK, let's merge #25 first. Then let's remove the FFI in a separate commit, then merge this PR last. Otherwise the commit history is hard to read because of the...