SAFE: Sponge API for Field Elements

ePrint Report: SAFE: Sponge API for Field Elements

JP Aumasson, Dmitry Khovratovich, Bart Mennink, Porçu Quine

From hashing and commitment schemes to Fiat-Shamir and encryption,
hash functions are everywhere in zero-knowledge proofsystems (ZKPs), and minor performance changes in ``vanilla'' implementations can translate in major discrepancies when the hash is processed as a circuit within the proofsystem.


Protocol designers have resorted to a number of techniques and custom
modes to optimize hash functions for ZKPs settings, but so far without a …

address api construction designers encryption eprint report functions hash hash functions hashing knowledge major performance protocol report safe settings single techniques translate vanilla