@@ -19,6 +19,8 @@ The code produces a zkSNARK for the statment "I know values _a_ and _b_ such tha
Also supported: scalar multiplication by a constant point (768 constraints), scalar multiplication by a public point (3048 constraints with a private precomputation table, or 1530 with a public one, but the public version is considerably slower to verify).
+As an application of the latter, the included verifenc program provides a zkSNARK for verified ElGamal encryption of a private key (corresponding to a given public key) to a given receiver's public key.
Ian Goldberg