Using Merlin

The preceding chapter, Merlin Transcripts, describes how Merlin transcripts operate. This chapter describes how to use Merlin to implement a proof protocol:

  • Transcript Protocols describes how to specify how a proof system's mathematical objects are encoded into transcript messages;
  • Passing Transcripts describes how to pass transcripts into proving and verification functions, and how this can provide domain separation and sequential composition;
  • Prover-Verifier Duality describes how two counterparties can interactively compose non-interactive proofs.