Module grouped_ciphertext_validity

The grouped-ciphertext validity proof instruction.

A grouped-ciphertext validity proof certifies that a grouped ElGamal ciphertext is well-defined, i.e. the ciphertext can be decrypted by private keys associated with its decryption handles. To generate the proof, a prover must provide the Pedersen opening associated with the grouped ciphertext’s commitment.

Currently, the grouped-ciphertext validity proof is restricted to ciphertexts with two handles. In accordance with the SPL Token program application, the first decryption handle associated with the proof is referred to as the “destination” handle and the second decryption handle is referred to as the “auditor” handle.

Structs

• GroupedCiphertext2HandlesValidityProofContext
• GroupedCiphertext2HandlesValidityProofData
  The instruction data that is needed for the ProofInstruction::VerifyGroupedCiphertextValidity instruction.