Halo2 circuit changes for Zcash Shielded Asset and Atomic Swaps
summary
Implementation details for Zcash Shielded Assets: Orchard value commitments gain a variable asset base point so asset type is included in commitments, note commitments get a second public base and a multiplexer to hide which equation is used, and split notes are introduced with a random PSI_NF witness. Circuits add private witnesses (asset, is_native, split_flag), boolean and non-equality checks, a new multiplexer gate, and decomposition updates for the hash (Cincinnati) input; an optimized common-prefix evaluation is planned and security reviews are ongoing.
AI-written summary · about
chapters (9)
- 0:00Start
- 6:04Circuit Changes - Overview
- 7:39Circuit Changes is_native_asset
- 13:01Circuit Changes - Orchard Note Commitment
- 16:59Circuit Changes-Note Commitment Implementation
- 19:19Circuit Changes - Hash Optimization
- 22:51Circuit Changes - Security for native asset
- 26:31Circuit Changes - Security for all cases
- 29:23Circuit Changes - Key Points to Remember
related talks
39mZSAs and Swaps--A Status Report
50mOrchard Shielded Assets
01h 05mExplaining the Security of Zcash
01h 01mThe Future of Zcash Panel
22mZcash For Every(One|Where): Creating Shielded Transactions on All The Things!
53mThe Future of Decentralized Applications on Zcash, a Shared Community Roadmap workshop
09mWhy Institutional Custody Breaks on Shielded Chains
31mCompliance for Digital Assets