Faster, Aggregatable and Quantum Safe Privacy Pools
In briefFaster, aggregatable, quantum-safe privacy pools (Tornado Cash-style)
SummaryThe authors port a Tornado Cash-style privacy pool to Flock, a post-quantum binary-field SNARK, using SHA-256 for the Merkle tree and nullifier hashing. They report proving a depth-32 withdrawal in under 30 ms and describe recursive aggregation of withdrawals. They also propose a recovery protocol in which wallets derive note secrets from a seed, so existing pools can survive a discrete logarithm break.