Lab

Uploading your own circuit is planned, not built. This lab runs the four bundled ones.

A leaf derived from a private secret sits under the public root, and the public tag came from the same secret and the public scope.

Reveals

The root, the scope and the tag. The same secret and scope always give the same tag.

Keeps out of the proof

The secret and the position in the tree.

Does not prove

That the wallet sending a transaction is the holder of the secret. Address, IP and timing stay visible.

Measured on this browser and device, one prover thread. Your next run or another machine will differ, and this is not a benchmark.

Generate

Private values stay in the worker. The bundled circuits are test material: do not put real secrets in them.