This specification delineates the framework for a Verifiable Random Function with Additional Data (VRF-AD), a cryptographic construct that augments a standard VRF by incorporating auxiliary information into its signature.
We're going to first provide a specification to extend IETF's ECVRF as outlined in [RFC9381] [@RFC9381]. Additionally, we describe a variant of the Pedersen VRF, first introduced by [BCHSV23] [@BCHSV23], which serves as a fundamental component for implementing anonymized ring signatures as further elaborated by [Vasilyev] [@Vasilyev].
This specification provides detailed insights into the usage of these primitives with [MSZ21] [@MSZ21], an elliptic curve constructed over the BLS12-381 scalar field.