Originally developed for ZCash, it has diverged now and focuses solely on the PLONK proof system. Uses our "community edition" pairing for Ethereum's BN256 curve.

Allows one to design PLONK circuits with custom gates and lookup tables with junction with franklin-crypto gadget library. At the moment the lookup argument implies using the lookup over the first three state columns (usually refered as A/B/C) and allows to have simultaneously a gate and a lookup applied on the same row of the trace.

Licensed under either of

• Apache License, Version 2.0, (LICENSE-APACHE or https://www.apache.org/licenses/LICENSE-2.0)
• MIT license (LICENSE-MIT or https://opensource.org/licenses/MIT)

at your option.

• Edcon2019_material
• EDCON Workshop record (youtube): Intro to bellman: Practical zkSNARKs constructing for Ethereum

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.