Zcash security analysis

This repository contains code and documentation supporting security analysis of Zcash.

Contents:

• zcash-security.{pdf,odp}: slides for Daira's "Explaining the Security of Zcash" presentation at Zcon3.
• sapling_entropy.py: calculate the entropy of ToScalar^Sapling(PRF^expand_K(constant)) where K is 256 bits.

License

All code and documentation in this repository is licensed under the MIT license.