Bypassing our number of nullifiers per tx kernel constraint for large number of token transfers

[spalladino]

@rahul-kothari

Commitments become a problem when multiple parties are involved since each has to be individually revealed. It might not work for some applications and it leaks privacy. One idea is to use encryption instead of commit-reveal schemes.

Shout-out to the Wonderland team who used LHE a while back to build their betting oracle. They used LHE for accumulating the total number of participants (not the total funds, those were kept in public), but maybe something similar could be done for balances.

Homomorphic Encryption Addition

Public state is great, it allows us to work on a synced global state. If we need to perform operations on a globally available state, to which we don’t have access on private-land, we can just call a public function that for example increases the total_users counter. doing this in private-land would require a contract to have a “leaked” Note which users would need to orderly nullify and update, forcing them to have reverted transactions if another user already has an in-transit tx that creat…

GitHub - defi-wonderland/aztec-coin-toss-pvp