halo2/src
Jack Grigg 67caed52eb mul::incomplete: Constrain final iteration correctly
The differences between the final iteration and prior iterations are:
- The final iteration does not constrain (x_T, y_T) to propagate down.
- The final iteration constrains an assigned y_A output instead of a
  derived y_A from the next iteration's variables.

We also swap the init_y constraint to match the book.

Co-authored-by: therealyingtong <yingtong@z.cash>
2021-07-07 23:10:59 +08:00
..
circuit mul::incomplete: Constrain final iteration correctly 2021-07-07 23:10:59 +08:00
constants Add `OrchardFixedBasesFull::{generator, u}` methods 2021-07-07 23:10:59 +08:00
note Fix clippy lints. 2021-06-16 19:13:40 +01:00
primitives Merge pull request #98 from zcash/merkle-chip 2021-06-29 23:09:15 +01:00
spec Rework PRF^expand to use explicit domains 2021-05-28 13:12:25 +01:00
test_vectors Note encryption test vectors 2021-06-11 23:55:17 +01:00
address.rs Note encryption test vectors 2021-06-11 23:55:17 +01:00
builder.rs Anchor computation is partial. 2021-06-24 09:43:10 -06:00
bundle.rs nonempty 0.7 2021-06-28 20:57:49 +01:00
circuit.rs Add `Bundle<Authorized, _>::dynamic_usage` method 2021-06-22 16:06:49 +01:00
constants.rs constants.rs: Add unit tests for T_P, T_Q constants. 2021-07-07 23:10:59 +08:00
keys.rs Make this crate clippy clean for warnings on nightly. 2021-06-21 18:04:00 +01:00
lib.rs Make note encryption OrchardDomain type public. 2021-06-30 12:47:37 -06:00
note.rs Note encryption test vectors 2021-06-11 23:55:17 +01:00
note_encryption.rs Make note encryption OrchardDomain type public. 2021-06-30 12:47:37 -06:00
primitives.rs
spec.rs mul::overflow.rs: Overflow check in variable-base scalar mul 2021-07-07 23:10:59 +08:00
test_vectors.rs Note encryption test vectors 2021-06-11 23:55:17 +01:00
tree.rs rustfmt 2021-06-28 18:48:58 +01:00
value.rs Use constants for value commitment hash-to-curve. 2021-06-23 18:04:17 -06:00