- Bulletproofs implementation primarily intended for a pairing friendly curve. Only 2 curves are supported, BLS12-381 and BN254 for now. Defaults to BLS12-381. Curve can be changed by changing default feature.
- Largely based on dalek's Bulletproof implementation. dalek's is not used since it works over Ristretto curve but since Ursa's credentials are on a pairing friendly curve, the Bulletproof needs to work over the same curve. The code is distributed under the terms of both the MIT license and the Apache 2.0 License.
- Uses Apache Milagro for finite field and elliptic curve operations.
- R1CS support is present though the API differs from dalek's. For gadgets, check here.
Licensed under either of
- Apache License, Version 2.0, (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
- MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT) at your option.