British cryptographer and protocol engineer.

Lead author of the Zcash Protocol Specification, the most comprehensive formal specification of a privacy-preserving cryptocurrency.

Designed key components of the Zcash Sapling and Orchard upgrades, improving efficiency and security of shielded transactions.

Co-invented the Orchard circuit using the Halo 2 proof system, achieving recursive proof composition without trusted setup.

Contributed to the design of the Pasta curves (Pallas and Vesta), an efficient curve cycle for recursive SNARKs.

Her work on privacy-preserving transactions directly informs cyber privacy: shielded cyberlinks, commitment schemes, nullifier-based double-spend prevention, and the ZK circuit architecture.

Local Graph