slothful reduction

This commit is contained in:
Jeff Burdges
2019-01-07 03:32:44 +01:00
parent fbcc64ae82
commit 239f1f246b
+1
View File
@@ -20,3 +20,4 @@ We include the recent block hash in the certificate, so that if the chain were t
We still lack any wonderful aggregation strategy for block production VRFs, so they may default to Ristretto Schnorr VRFs. In this case, the Ristretto Schnorr session key component living longer also help minimize attacks on our random beacon.
We should consider [slothful reduction](https://eprint.iacr.org/2017/437) as discussed in https://github.com/zkcrypto/pairing/issues/98 since GRANDPA uses the small curve key form.