Rtl19oct File

: It achieves this by using the discrete log assumption over "cycles" of elliptic curves (specifically the Pasta curves: Pallas and Vesta), which makes the proofs practical to run on standard hardware.