Weierstrass BN254 zero-knowledge trusted setup ceremony.

Go to file

Sean Bowe f21732a8e5 Initial commit		2017-10-29 18:58:34 -06:00
src	Initial commit	2017-10-29 18:58:34 -06:00
.gitignore	Initial commit	2017-10-29 18:58:34 -06:00
Cargo.lock	Initial commit	2017-10-29 18:58:34 -06:00
Cargo.toml	Initial commit	2017-10-29 18:58:34 -06:00
COPYRIGHT	Initial commit	2017-10-29 18:58:34 -06:00
LICENSE-APACHE	Initial commit	2017-10-29 18:58:34 -06:00
LICENSE-MIT	Initial commit	2017-10-29 18:58:34 -06:00
README.md	Initial commit	2017-10-29 18:58:34 -06:00

README.md

Powers of Tau

This is a multi-party computation (MPC) ceremony which constructs partial zk-SNARK parameters for all circuits up to a depth of 2²¹. It works by taking a step that is performed by all zk-SNARK MPCs and performing it in just one single ceremony. This makes individual zk-SNARK MPCs much cheaper and allows them to scale to practically unbounded numbers of participants.

This protocol is described in a forthcoming paper. It produces parameters for an adaptation of Jens Groth's 2016 pairing-based proving system using the BLS12-381 elliptic curve construction. The security proof relies on a randomness beacon being applied at the end of the ceremony.

This is a work in progress.

License

Licensed under either of

Apache License, Version 2.0, (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.