namada-masp

MASP, Namada's Multi-Asset Shielded Pool

namada L1 privacy final protocol spec BLS12-381

Native status: Mainnet
Enables: Shielded transfers for arbitrary assets via a Sapling-derived Groth16 circuit over BLS12-381
Specification: https://specs.namada.net/masp.html

Namada's Multi-Asset Shielded Pool (MASP) extends the Zcash Sapling circuit so that many asset types share a single shielded pool, adding a Convert circuit for shielded conversions between assets. Like Sapling it proves with Groth16 over the pairing-friendly BLS12-381 curve, using the embedded Jubjub curve for in-circuit commitments and signatures. The cross-ecosystem hook is BLS12-381, the same pairing curve Ethereum (EIP-2537) and Filecoin (FIP-0079) expose; the in-circuit Jubjub usage mirrors Zcash's own canonical encoding (ZIP-0216). Namada's verifier is not wired into the parity harness.

Implementations

masp rust not independently audited

Relationships

Equivalent to: EIP-2537, FIP-0079, SIMD-0388

Sources

https://docs.namada.net/users/shielded-accounts
https://github.com/anoma/masp