The preceding chapter, Merlin Transcripts, describes how Merlin transcripts operate. This chapter describes how to use Merlin to implement a proof protocol:
- Transcript Protocols describes how to specify how a proof system's mathematical objects are encoded into transcript messages;
- Passing Transcripts describes how to pass transcripts into proving and verification functions, and how this can provide domain separation and sequential composition;
- Prover-Verifier Duality describes how two counterparties can interactively compose non-interactive proofs.