rickwebiii

Building Rust bindings for aarch64 (and x86_64, etc) wasn't too bad; simply use the `cmake` crate to compile SEAL in a `build.rs` file with C bindings and as a static...

I should probably add a note in the README to run ``` git submodule init git submodule update ``` after cloning your enlistment.

> Well, as long as we didn't pick one of the points of g_vec or h_vec to be a known power of RISTRETTO_BASEPOINT_POINT. I think choosing Q by hashing the...

Where do you expect a `u8` to come into play? You've just proven 200 < 2^8 and attempted to prove 400 < 2^8. The commitments are EC points, not `u8`...

Awesome, good to hear!

@ethyi I need someone to click "Approve and Run" as this is my first contribution here.

@ethyi I did some investigation as to why they were using zeroize >=1.0,

If it makes a difference, this was run on an M1 MacBook Air with 7-core GPU.

You can't multiply 2 ciphertexts encrypted under different keys, much less different scheme parameters; they're fundamentally incompatible. What application are you trying to implement that needs such a thing and...

You can't change the number of SIMD lanes, as it's fixed to be the polynomial degree. If you want to mask e.g. the second slot, you can multiply by [0,...