*DRI: **@Deleted User** *

*People: Porcu ?*

*Started: ββ*

This project aims to build a publicly verifiable DKG on Nova using the Bitcoin cycle of curves.

# Blockers

## Nova Recursion

Nova recursion is coming soon (end February / early March) but we canβt do anything until then

**Unblocked tentatively in Q1 2022**

## Circuit building on both fields

We need the ability to build circuits on both sides of the cycle, so on Fr and Fq. The former is needed for doing polynomial evaluation and share encryption and the latter is needed to do the polynomial commitment and share encryption as well.

**Unblocked tentatively in Q3 2022**

## Nova/Lurk public input aggregation

The dealer needs to prove correct evaluation and encryption of distinct elements, which do not share really a recursive form. We would like the verifier to *not* have to input all the public inputs but to have a constant size verification that all public inputs really come from an aggregated source.

From discussion with Porcu, Lurk is intending to build this as part their framework.

**Unblocked tentatively in Q2 2022**