Originally developed for ZCash, with extensions from us to make it a little more pleasant. Uses our "community edition" pairing for Ethereum's BN256 curve. Now published as bellman_ce
on crate.io
to allow ease of use.
There are two available features to be used in production and are stable and will not be changed in terms of API. Those are Groth16 proof system implementation.
multicore
feature (enabled by default) is intended to be run on PC and in environments that have support of a fullstd
including threading.singlecore
feature is mainly intended for WASM systems, where non-compatible external crates are removed, along with all the multithreading.
Due to request to have a maintainable repo with WASM compatibility those features were implemented during the implementation of GM17 and SONIC proof systems. That's why there are two more features that are incomplete and will have breaking changes in a future. Those are for interested enthusiasts.
gm17
- is incomplete and most likely will get attention after putting SONIC to completeness.sonic
- 90% complete. Original implementation ofhelped
protocol is integrated with API similar to the Groth16, along with wrapping adapters to use existing circuits without any changes.unhelped
version is not yet complete, but all cryptographical primitives are implemented and tested. Right now it's a priority.
It's intended to add GM17
proof system and SONIC
proof system.
There are two available features to be used in production and are stable and will not be changed in terms of API. Those are Groth16 proof system implementation.
multicore
feature (enabled by default) is intended to be run on PC and in environments that have support of a fullstd
including threading.singlecore
feature is mainly intended for WASM systems, where non-compatible external crates are removed, along with all the multithreading.
Due to request to have a maintainable repo with WASM compatibility those features were implemented during the implementation of GM17 and SONIC proof systems. That's why there are two more features that are incomplete and will have breaking changes in a future. Those are for interested enthusiasts.
gm17
- is incomplete and most likely will get attention after putting SONIC to completeness.sonic
- 90% complete. Original implementation ofhelped
protocol is integrated with API similar to the Groth16, along with wrapping adapters to use existing circuits without any changes.unhelped
version is not yet complete, but all cryptographical primitives are implemented and tested. Right now it's a priority.
It's intended to add GM17
proof system and SONIC
proof system.
Licensed under either of
- Apache License, Version 2.0, (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
- MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)
at your option.
- Edcon2019_material
- EDCON Workshop record (youtube): Intro to bellman: Practical zkSNARKs constructing for Ethereum
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.