ZIP-0224

Orchard Shielded Protocol

zcash L1 privacy final Poseidon

Native status: Final
Enables: Trustless-setup shielded payments
Specification: https://zips.z.cash/zip-0224

Orchard defines a new shielded pool built on the Halo 2 proving system, removing the trusted setup that Sapling's Groth16 required. It is realized over the Pallas/Vesta (Pasta) curve cycle and uses the Poseidon hash for its note commitments and nullifiers and Sinsemilla for Merkle-tree hashing; activated in Network Upgrade 5 (NU5).

Implementations

orchard rust audited report
halo2 rust audited report

Relationships

Equivalent to: FIP-0092, SNIP-12, MIP-0003, aleo-varuna, penumbra-groth16

Sources

https://zips.z.cash/protocol/protocol.pdf
https://z.cash/upgrade/nu5/