Skip to main content

OR-aggregation Protocol

Definition

An OR-aggregation Protocol is a cryptographic construction that allows multiple individual proofs or statements to be combined into a single, compact proof. This combined proof verifies that at least one of the original statements is true, without revealing which specific statement holds. It significantly reduces the on-chain data footprint and verification cost when dealing with a collection of possible valid conditions. Such protocols are useful for privacy-preserving applications where a user wants to prove membership in a set without disclosing the specific member.