WASM Performance (this demo):

• Uses WASM SIMD128 for ~2x speedup over scalar
• Multi-threaded via Web Workers (requires SharedArrayBuffer)
• 2^20 proof: ~1-2s (vs ~50ms native with AVX-512)
• Best in Chrome/Edge with hardware acceleration enabled

Native CLI (3-10x faster):

# Install with native CPU optimizations
RUSTFLAGS="-C target-cpu=native" cargo install ligerito

# Generate polynomial and prove
ligerito generate --size 20 > poly.bin
ligerito prove --size 20 --transcript sha256 < poly.bin > proof.bin

# Verify (works with proofs from this demo!)
ligerito verify --size 20 --transcript sha256 < proof.bin

Transcript Compatibility:

• sha256 - Default, works everywhere, CLI compatible
• merlin - Zcash/Dalek standard, stronger domain separation
• blake2b - Optimized for Substrate runtimes
• Use --transcript TYPE in CLI to match this demo
• Proofs are transcript-specific - prover and verifier must match!