In the Signal SparsePostQuantumRatchet (SPQR) announcement blog post, they mention that they did formal verification from the beginning of their implementation effort, first by modeling protocol candi...

When we write tests to check the correctness of our code, we're used to thinking of examples: base cases, boundary conditions, edge cases, and so on. We enumerate these examples, and write example-bas...

Diversified addresses are a feature of ZCash-like protocols that let you publish an effectively unlimited number (well, $2^{88}$) of unlinkable payment addresses all of which pay into the same wallet.

This post is a gentle introduction to shielded transactions, as used in private payment systems such as ZCash, Penumbra or on top of any Bitcoin-shaped (i.e. UTXO-based) protocol. At the end of this p...

Shielded blockchains like Penumbra provide privacy through the use of zero-knowledge proofs (ZKPs): actions that change the public chain state can be verified _without_ providing the underlying privat...