ethresear.ch: faster, aggregatable and quantum-safe privacy pools
17:59 (Pierre, with winderica). Pools like Tornado Cash rely on Pedersen commitments and Groth16 proofs, both resting on the hardness of discrete log. The authors port it to Flock, a post-quantum binary-field SNARK, proving a depth-32 withdrawal over SHA-256 in under 30 ms, and describe a simple recovery protocol: as long as wallets derive note secrets from a seed, existing pools can survive a discrete log break.
