Blockchain, Zero Knowledge Proofs, Crypto, Rust, Cryptography.
“Generalized EdDSA”; and Mike Hamburg’s deterministic nonce construction sketched in the STROBE paper, towards a design that’s flexible enough for arbitrarily complex proofs. To generate randomness, the prover clones the public transcript state to obtain a private fork of the transcript, then