2023-11-09 15:20:07 +01:00
|
|
|
|
2023-11-11 13:35:13 +01:00
|
|
|
Groth16 prover written in Nim
|
|
|
|
|
-----------------------------
|
2023-11-09 15:20:07 +01:00
|
|
|
|
|
|
|
|
This is Groth16 prover implementation in Nim, using the
|
|
|
|
|
[`constantine`](https://github.com/mratsim/constantine)
|
|
|
|
|
library as an arithmetic / curve backend.
|
|
|
|
|
|
2023-11-11 13:35:13 +01:00
|
|
|
The implementation is compatible with the `circom` ecosystem.
|
2023-11-09 15:20:07 +01:00
|
|
|
|
|
|
|
|
At the moment only the `BN254` (aka. `alt-bn128`) curve is supported.
|
2023-11-11 13:35:13 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
### TODO
|
|
|
|
|
|
|
|
|
|
- [ ] make it a nimble package
|
|
|
|
|
- [ ] proper MSM implementation (I couldn't make constantine's one to work)
|
|
|
|
|
- [ ] proper polynomial implemention (constantine's one is essentially missing)
|
|
|
|
|
- [ ] compare `.r1cs` to the "coeffs" section of `.zkey`
|
|
|
|
|
- [ ] make it work for different curves
|
|
|
|
|
- [ ] multithreaded support (MSM, and possibly also FFT)
|
|
|
|
|
- [ ] add Groth16 notes
|
|
|
|
|
- [ ] document the `snarkjs` circuit-specific setup `H` points convention
|
|
|
|
|
|
