Expand description

The zero-balance proof instruction.

A zero-balance proof is defined with respect to a twisted ElGamal ciphertext. The proof certifies that a given ciphertext encrypts the message 0 in the field (Scalar::zero()). To generate the proof, a prover must provide the decryption key for the ciphertext.

Structs§