sapling-security-analysis

Formal proofs of security properties for the Zcash Sapling protocol.