Weikeng Chen

Golden apple ``obliv if``?

2

I recently want to run Circuit ORAM on EMP-AGMPC (ah, both come mostly from you), so the main challenge is to write `prepare_deepest` and so on. In Obliv-C, writing `prepare_deepest`...

Separate benchmarks from tests

1

This is related to the high overhead of CI. It appears that certain tests in the repo are closer to a benchmark than a test. A good example is here:...

Plan to add TLSIO?

3

The current network I/O component, NetIO, does not have end-to-end encryption of the circuits. There are two small problems: 1. An in-path attacker (not a party in the MPC) could...

Important to have a portable feature

1

I came from Aleo's snarkOS, where we know two users have had issues with "illegal instructions". A detailed, package-by-package walkthrough shows that `rust-rocksdb` uses BMI2/AVX2 instruction, which will fail in...

This PR is not to `main`, but to `update-deps`. This PR updates the dependency of `curve25519-dalek` to a version that uses `rand = 0.8`. Since the code in `update-deps` is...

Serialization with modes

1

When I was implementing serialization for certain data structures (manually), there appears to be a lot of repeated code that just calls the underlying function differently (e.g., `deserialize` vs `deserialize_uncompressed`)....

## Description This PR adds a consistency test for the g2 prepared element for BLS12-377. There is space of improvement for this test: `G2PreparedGadget` at this moment only implements `ToBytesGadget`...

Marlin IVC for a predicate of 10^6 max degree would demand ~3000k degrees for MNT6-753. However, MNT6-753 currently has a domain of 2^15 * 5^2, which is insufficient to support...

`to_matrices` is called before `inline_all_lcs`

2

The current `master` branch may fail to index a circuit because the `index` function would call: ``` let matrices = cs.to_matrices().unwrap(); ``` in `make_matrices_square_for_indexer`, before calling `inline_all_lcs`. As a result,...

Commit-and-Prove Marlin

5

This issue is just to remark a useful variant of Marlin with the property of commit-and-prove. Basically, the verifier does not know the input but instead obtains a commitment of...