Notes

• Titan achieves transparent setup without trusted initialization.
• Proof sizes are an order of magnitude smaller than hash-based PCS.
• More efficient prover and verifier than Dory and Hyrax.
• Supports general discrete-log hard curves like Pasta, no pairing needed.
• TitanSnark reduces proof size and verification from O(n) to O(√n) compared to Spartan.
• The IOPP+Pedersen combination is of independent interest.

• Titan承诺方案具有透明设置，无需可信初始化。
• 证明大小比基于哈希的PCS小一个数量级。
• 相比Dory和Hyrax，证明者和验证者效率显著提升。
• 可在普通离散对数曲线上实例化，无需配对友好曲线。
• TitanSnark将Spartan的证明大小和验证复杂度从O(n)降低到O(√n)。
• 结合IOPP与Pedersen承诺的方法具有独立研究价值。