wip

refactor: remove encoding commitment (#1071 )
2026-01-14 00:57:56 -05:00 · 2026-01-13 11:06:12 -08:00 · 2026-01-13 10:12:05 -08:00 · 2026-01-08 07:55:03 -08:00 · 2026-01-05 09:55:35 +00:00 · 2026-01-05 09:38:31 +00:00
57 changed files with 1323 additions and 2446 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ env:
  #   - https://github.com/privacy-ethereum/mpz/issues/178
  # 32 seems to be big enough for the foreseeable future
  RAYON_NUM_THREADS: 32
-  RUST_VERSION: 1.91.1
+  RUST_VERSION: 1.92.0
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

 jobs:
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2026,7 +2026,7 @@ checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d"
 [[package]]
 name = "clmul"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "bytemuck",
 "cfg-if",
@@ -2051,7 +2051,7 @@ checksum = "3538270d33cc669650c4b093848450d380def10c331d38c768e34cac80576e6e"
 dependencies = [
 "serde",
 "termcolor",
- "unicode-width",
+ "unicode-width 0.1.14",
 ]

 [[package]]
@@ -2096,6 +2096,19 @@ dependencies = [
 "crossbeam-utils",
 ]

+[[package]]
+name = "console"
+version = "0.15.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8"
+dependencies = [
+ "encode_unicode",
+ "libc",
+ "once_cell",
+ "unicode-width 0.2.2",
+ "windows-sys 0.59.0",
+]
+
 [[package]]
 name = "console_error_panic_hook"
 version = "0.1.7"
@@ -2900,6 +2913,12 @@ dependencies = [
 "zeroize",
 ]

+[[package]]
+name = "encode_unicode"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0"
+
 [[package]]
 name = "enum-ordinalize"
 version = "4.3.2"
@@ -3877,6 +3896,19 @@ dependencies = [
 "serde_core",
 ]

+[[package]]
+name = "indicatif"
+version = "0.17.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "183b3088984b400f4cfac3620d5e076c84da5364016b4f49473de574b2586235"
+dependencies = [
+ "console",
+ "number_prefix",
+ "portable-atomic",
+ "unicode-width 0.2.2",
+ "web-time 1.1.0",
+]
+
 [[package]]
 name = "inout"
 version = "0.1.4"
@@ -4225,7 +4257,7 @@ checksum = "47e1ffaa40ddd1f3ed91f717a33c8c0ee23fff369e3aa8772b9605cc1d22f4c3"
 [[package]]
 name = "matrix-transpose"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "thiserror 1.0.69",
 ]
@@ -4282,7 +4314,7 @@ dependencies = [
 [[package]]
 name = "mpz-circuits"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "mpz-circuits-core",
 "mpz-circuits-data",
@@ -4291,7 +4323,7 @@ dependencies = [
 [[package]]
 name = "mpz-circuits-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "bincode 1.3.3",
 "itybity 0.3.1",
@@ -4306,7 +4338,7 @@ dependencies = [
 [[package]]
 name = "mpz-circuits-data"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "bincode 1.3.3",
 "mpz-circuits-core",
@@ -4316,7 +4348,7 @@ dependencies = [
 [[package]]
 name = "mpz-cointoss"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "futures",
 "mpz-cointoss-core",
@@ -4329,7 +4361,7 @@ dependencies = [
 [[package]]
 name = "mpz-cointoss-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "mpz-core",
 "opaque-debug",
@@ -4340,7 +4372,7 @@ dependencies = [
 [[package]]
 name = "mpz-common"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "bytes",
@@ -4354,13 +4386,12 @@ dependencies = [
 "thiserror 1.0.69",
 "tokio",
 "tokio-util",
- "uid-mux",
 ]

 [[package]]
 name = "mpz-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "aes 0.9.0-rc.2",
 "bcs",
@@ -4386,7 +4417,7 @@ dependencies = [
 [[package]]
 name = "mpz-fields"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "ark-ff 0.4.2",
 "ark-secp256r1",
@@ -4406,9 +4437,10 @@ dependencies = [
 [[package]]
 name = "mpz-garble"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
+ "blake3",
 "derive_builder 0.11.2",
 "futures",
 "hashbrown 0.14.5",
@@ -4421,7 +4453,7 @@ dependencies = [
 "mpz-vm-core",
 "opaque-debug",
 "rand 0.9.2",
- "rangeset 0.2.0",
+ "rangeset",
 "serde",
 "serio",
 "thiserror 1.0.69",
@@ -4432,7 +4464,7 @@ dependencies = [
 [[package]]
 name = "mpz-garble-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "aes 0.9.0-rc.2",
 "bitvec",
@@ -4452,7 +4484,7 @@ dependencies = [
 "rand 0.9.2",
 "rand_chacha 0.9.0",
 "rand_core 0.9.3",
- "rangeset 0.2.0",
+ "rangeset",
 "rayon",
 "serde",
 "serde_arrays",
@@ -4463,7 +4495,7 @@ dependencies = [
 [[package]]
 name = "mpz-hash"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "blake3",
 "itybity 0.3.1",
@@ -4476,7 +4508,7 @@ dependencies = [
 [[package]]
 name = "mpz-ideal-vm"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "futures",
@@ -4484,7 +4516,7 @@ dependencies = [
 "mpz-core",
 "mpz-memory-core",
 "mpz-vm-core",
- "rangeset 0.2.0",
+ "rangeset",
 "serde",
 "serio",
 "thiserror 1.0.69",
@@ -4493,14 +4525,14 @@ dependencies = [
 [[package]]
 name = "mpz-memory-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "blake3",
 "futures",
 "itybity 0.3.1",
 "mpz-core",
 "rand 0.9.2",
- "rangeset 0.2.0",
+ "rangeset",
 "serde",
 "thiserror 1.0.69",
 ]
@@ -4508,7 +4540,7 @@ dependencies = [
 [[package]]
 name = "mpz-ole"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "futures",
@@ -4526,7 +4558,7 @@ dependencies = [
 [[package]]
 name = "mpz-ole-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "hybrid-array",
 "itybity 0.3.1",
@@ -4542,7 +4574,7 @@ dependencies = [
 [[package]]
 name = "mpz-ot"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "cfg-if",
@@ -4557,6 +4589,7 @@ dependencies = [
 "rand 0.9.2",
 "rand_chacha 0.9.0",
 "rand_core 0.9.3",
+ "serde",
 "serio",
 "thiserror 1.0.69",
 "tokio",
@@ -4565,7 +4598,7 @@ dependencies = [
 [[package]]
 name = "mpz-ot-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "aes 0.9.0-rc.2",
 "blake3",
@@ -4596,7 +4629,7 @@ dependencies = [
 [[package]]
 name = "mpz-share-conversion"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "mpz-common",
@@ -4612,7 +4645,7 @@ dependencies = [
 [[package]]
 name = "mpz-share-conversion-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "mpz-common",
 "mpz-core",
@@ -4626,7 +4659,7 @@ dependencies = [
 [[package]]
 name = "mpz-vm-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "futures",
@@ -4639,7 +4672,7 @@ dependencies = [
 [[package]]
 name = "mpz-zk"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "async-trait",
 "blake3",
@@ -4657,7 +4690,7 @@ dependencies = [
 [[package]]
 name = "mpz-zk-core"
 version = "0.1.0-alpha.4"
-source = "git+https://github.com/privacy-ethereum/mpz?rev=9c343f8#9c343f86d386bc1360d6ac0a37eb1af65f48216a"
+source = "git+https://github.com/privacy-ethereum/mpz?rev=d9baf0f#d9baf0fb57e9db118caef92aaf9b693f4343aef1"
 dependencies = [
 "blake3",
 "cfg-if",
@@ -4666,7 +4699,8 @@ dependencies = [
 "mpz-core",
 "mpz-memory-core",
 "mpz-vm-core",
- "rangeset 0.2.0",
+ "rand_chacha 0.9.0",
+ "rangeset",
 "rayon",
 "serde",
 "thiserror 1.0.69",
@@ -5011,6 +5045,12 @@ dependencies = [
 "syn 2.0.111",
 ]

+[[package]]
+name = "number_prefix"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3"
+
 [[package]]
 name = "nybbles"
 version = "0.4.6"
@@ -5371,6 +5411,12 @@ dependencies = [
 "universal-hash 0.5.1",
 ]

+[[package]]
+name = "portable-atomic"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f59e70c4aef1e55797c2e8fd94a4f2a973fc972cfde0e0b05f683667b0cd39dd"
+
 [[package]]
 name = "potential_utf"
 version = "0.1.4"
@@ -5759,15 +5805,6 @@ version = "1.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "acbbbbea733ec66275512d0b9694f34102e7d5406fdbe2ad8d21b28dce92887c"

-[[package]]
-name = "rangeset"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fc7af00a06ad692080d87495a904677592c662610edb82b4fc8782f4ed2f01f"
-dependencies = [
- "serde",
-]
-
 [[package]]
 name = "rangeset"
 version = "0.4.0"
@@ -6835,7 +6872,7 @@ dependencies = [
 "httparse",
 "pest",
 "pest_derive",
- "rangeset 0.4.0",
+ "rangeset",
 "serde",
 "thiserror 1.0.69",
 ]
@@ -7229,7 +7266,7 @@ dependencies = [
 "once_cell",
 "opaque-debug",
 "rand 0.9.2",
- "rangeset 0.4.0",
+ "rangeset",
 "rstest",
 "rustls-pki-types",
 "rustls-webpki 0.103.8",
@@ -7242,6 +7279,7 @@ dependencies = [
 "tlsn-core",
 "tlsn-deap",
 "tlsn-mpc-tls",
+ "tlsn-mux",
 "tlsn-server-fixture",
 "tlsn-server-fixture-certs",
 "tlsn-tls-client",
@@ -7251,7 +7289,6 @@ dependencies = [
 "tokio-util",
 "tracing",
 "tracing-subscriber",
- "uid-mux",
 "web-spawn",
 "webpki-roots 1.0.4",
 ]
@@ -7270,6 +7307,7 @@ dependencies = [
 "p256",
 "rand 0.9.2",
 "rand06-compat",
+ "rangeset",
 "rstest",
 "serde",
 "thiserror 1.0.69",
@@ -7312,7 +7350,7 @@ dependencies = [
 "rand 0.9.2",
 "rand_chacha 0.9.0",
 "rand_core 0.9.3",
- "rangeset 0.4.0",
+ "rangeset",
 "rs_merkle",
 "rstest",
 "rustls-pki-types",
@@ -7347,7 +7385,7 @@ dependencies = [
 "mpz-core",
 "mpz-ideal-vm",
 "mpz-vm-core",
- "rangeset 0.4.0",
+ "rangeset",
 "serde",
 "serio",
 "thiserror 1.0.69",
@@ -7459,6 +7497,7 @@ dependencies = [
 "csv",
 "duct",
 "futures",
+ "indicatif",
 "ipnet",
 "serde_json",
 "serio",
@@ -7561,6 +7600,7 @@ dependencies = [
 "tlsn-core",
 "tlsn-hmac-sha256",
 "tlsn-key-exchange",
+ "tlsn-mux",
 "tlsn-tls-backend",
 "tlsn-tls-client",
 "tlsn-tls-client-async",
@@ -7569,10 +7609,25 @@ dependencies = [
 "tokio-util",
 "tracing",
 "tracing-subscriber",
- "uid-mux",
 "web-time 0.2.4",
 ]

+[[package]]
+name = "tlsn-mux"
+version = "0.1.0"
+source = "git+https://github.com/tlsnotary/tlsn-utils?rev=d9facb6#d9facb6f11daa182301b13c33688795e1affdb4a"
+dependencies = [
+ "blake3",
+ "futures",
+ "log",
+ "nohash-hasher",
+ "parking_lot",
+ "pin-project",
+ "rand 0.9.2",
+ "static_assertions",
+ "web-time 1.1.0",
+]
+
 [[package]]
 name = "tlsn-server-fixture"
 version = "0.0.0"
@@ -8095,23 +8150,6 @@ version = "0.1.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2896d95c02a80c6d6a5d6e953d479f5ddf2dfdb6a244441010e373ac0fb88971"

-[[package]]
-name = "uid-mux"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34769f8c719d9e76d8f29186f1935b5c1fff91d27d839dd8d84dc4527eca8fdd"
-dependencies = [
- "async-trait",
- "blake3",
- "futures",
- "hex",
- "serio",
- "tokio",
- "tokio-util",
- "tracing",
- "yamux",
-]
-
 [[package]]
 name = "uint"
 version = "0.9.5"
@@ -8160,6 +8198,12 @@ version = "0.1.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7dd6e30e90baa6f72411720665d41d89b9a3d039dc45b8faea1ddd07f617f6af"

+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
 [[package]]
 name = "unicode-xid"
 version = "0.2.6"
@@ -8945,22 +8989,6 @@ dependencies = [
 "tap",
 ]

-[[package]]
-name = "yamux"
-version = "0.13.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "deab71f2e20691b4728b349c6cee8fc7223880fa67b6b4f92225ec32225447e5"
-dependencies = [
- "futures",
- "log",
- "nohash-hasher",
- "parking_lot",
- "pin-project",
- "rand 0.9.2",
- "static_assertions",
- "web-time 1.1.0",
-]
-
 [[package]]
 name = "yansi"
 version = "1.0.1"
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -53,6 +53,7 @@ tlsn-formats = { path = "crates/formats" }
 tlsn-hmac-sha256 = { path = "crates/components/hmac-sha256" }
 tlsn-key-exchange = { path = "crates/components/key-exchange" }
 tlsn-mpc-tls = { path = "crates/mpc-tls" }
+tlsn-mux = { git = "https://github.com/tlsnotary/tlsn-utils", rev = "d9facb6" }
 tlsn-server-fixture = { path = "crates/server-fixture/server" }
 tlsn-server-fixture-certs = { path = "crates/server-fixture/certs" }
 tlsn-tls-backend = { path = "crates/tls/backend" }
@@ -66,26 +67,25 @@ tlsn-harness-runner = { path = "crates/harness/runner" }
 tlsn-wasm = { path = "crates/wasm" }
 tlsn = { path = "crates/tlsn" }

-mpz-circuits = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-circuits-data = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-memory-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-common = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-vm-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-garble = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-garble-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-ole = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-ot = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-share-conversion = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-fields = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-zk = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-hash = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
-mpz-ideal-vm = { git = "https://github.com/privacy-ethereum/mpz", rev = "9c343f8" }
+mpz-circuits = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-circuits-data = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-memory-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-common = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-vm-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-garble = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-garble-core = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-ole = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-ot = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-share-conversion = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-fields = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-zk = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-hash = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }
+mpz-ideal-vm = { git = "https://github.com/privacy-ethereum/mpz", rev = "d9baf0f" }

 rangeset = { version = "0.4" }
 serio = { version = "0.2" }
 spansy = { git = "https://github.com/tlsnotary/tlsn-utils", rev = "6f1a934" }
-uid-mux = { version = "0.2" }
 websocket-relay = { git = "https://github.com/tlsnotary/tlsn-utils", rev = "6f1a934" }

 aead = { version = "0.4" }
--- a/crates/attestation/Cargo.toml
+++ b/crates/attestation/Cargo.toml
@@ -27,6 +27,7 @@ alloy-primitives = { version = "1.3.1", default-features = false }
 alloy-signer = { version = "1.0", default-features = false }
 alloy-signer-local = { version = "1.0", default-features = false }
 rand06-compat = { workspace = true }
+rangeset = { workspace = true }
 rstest = { workspace = true }
 tlsn-core = { workspace = true, features = ["fixtures"] }
 tlsn-data-fixtures = { workspace = true }
--- a/crates/attestation/src/builder.rs
+++ b/crates/attestation/src/builder.rs
@@ -5,7 +5,7 @@ use rand::{Rng, rng};
 use tlsn_core::{
    connection::{ConnectionInfo, ServerEphemKey},
    hash::HashAlgId,
-    transcript::{TranscriptCommitment, encoding::EncoderSecret},
+    transcript::TranscriptCommitment,
 };

 use crate::{
@@ -25,7 +25,6 @@ pub struct Sign {
    connection_info: Option<ConnectionInfo>,
    server_ephemeral_key: Option<ServerEphemKey>,
    cert_commitment: ServerCertCommitment,
-    encoder_secret: Option<EncoderSecret>,
    extensions: Vec<Extension>,
    transcript_commitments: Vec<TranscriptCommitment>,
 }
@@ -87,7 +86,6 @@ impl<'a> AttestationBuilder<'a, Accept> {
                connection_info: None,
                server_ephemeral_key: None,
                cert_commitment,
-                encoder_secret: None,
                transcript_commitments: Vec::new(),
                extensions,
            },
@@ -108,12 +106,6 @@ impl AttestationBuilder<'_, Sign> {
        self
    }

-    /// Sets the secret for encoding commitments.
-    pub fn encoder_secret(&mut self, secret: EncoderSecret) -> &mut Self {
-        self.state.encoder_secret = Some(secret);
-        self
-    }
-
    /// Adds an extension to the attestation.
    pub fn extension(&mut self, extension: Extension) -> &mut Self {
        self.state.extensions.push(extension);
@@ -137,7 +129,6 @@ impl AttestationBuilder<'_, Sign> {
            connection_info,
            server_ephemeral_key,
            cert_commitment,
-            encoder_secret,
            extensions,
            transcript_commitments,
        } = self.state;
@@ -168,7 +159,6 @@ impl AttestationBuilder<'_, Sign> {
                AttestationBuilderError::new(ErrorKind::Field, "handshake data was not set")
            })?),
            cert_commitment: field_id.next(cert_commitment),
-            encoder_secret: encoder_secret.map(|secret| field_id.next(secret)),
            extensions: extensions
                .into_iter()
                .map(|extension| field_id.next(extension))
@@ -253,8 +243,7 @@ mod test {
    use rstest::{fixture, rstest};
    use tlsn_core::{
        connection::{CertBinding, CertBindingV1_2},
-        fixtures::{ConnectionFixture, encoding_provider},
-        hash::Blake3,
+        fixtures::ConnectionFixture,
        transcript::Transcript,
    };
    use tlsn_data_fixtures::http::{request::GET_WITH_HEADER, response::OK_JSON};
@@ -285,13 +274,7 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection,
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } = request_fixture(transcript, connection, Vec::new());

        let attestation_config = AttestationConfig::builder()
            .supported_signature_algs([SignatureAlgId::SECP256R1])
@@ -310,13 +293,7 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection,
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } = request_fixture(transcript, connection, Vec::new());

        let attestation_config = AttestationConfig::builder()
            .supported_signature_algs([SignatureAlgId::SECP256K1])
@@ -336,13 +313,7 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection,
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } = request_fixture(transcript, connection, Vec::new());

        let attestation_builder = Attestation::builder(attestation_config)
            .accept_request(request)
@@ -363,13 +334,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let mut attestation_builder = Attestation::builder(attestation_config)
            .accept_request(request)
@@ -393,13 +359,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let mut attestation_builder = Attestation::builder(attestation_config)
            .accept_request(request)
@@ -432,9 +393,7 @@ mod test {

        let RequestFixture { request, .. } = request_fixture(
            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
            connection.clone(),
-            Blake3::default(),
            vec![Extension {
                id: b"foo".to_vec(),
                value: b"bar".to_vec(),
@@ -461,9 +420,7 @@ mod test {

        let RequestFixture { request, .. } = request_fixture(
            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
            connection.clone(),
-            Blake3::default(),
            vec![Extension {
                id: b"foo".to_vec(),
                value: b"bar".to_vec(),
--- a/crates/attestation/src/fixtures.rs
+++ b/crates/attestation/src/fixtures.rs
@@ -2,11 +2,7 @@
 use tlsn_core::{
    connection::{CertBinding, CertBindingV1_2},
    fixtures::ConnectionFixture,
-    hash::HashAlgorithm,
-    transcript::{
-        Transcript, TranscriptCommitConfigBuilder, TranscriptCommitment,
-        encoding::{EncodingProvider, EncodingTree},
-    },
+    transcript::{Transcript, TranscriptCommitConfigBuilder, TranscriptCommitment},
 };

 use crate::{
@@ -21,16 +17,13 @@ use crate::{
 /// A Request fixture used for testing.
 #[allow(missing_docs)]
 pub struct RequestFixture {
-    pub encoding_tree: EncodingTree,
    pub request: Request,
 }

 /// Returns a request fixture for testing.
 pub fn request_fixture(
    transcript: Transcript,
-    encodings_provider: impl EncodingProvider,
    connection: ConnectionFixture,
-    encoding_hasher: impl HashAlgorithm,
    extensions: Vec<Extension>,
 ) -> RequestFixture {
    let provider = CryptoProvider::default();
@@ -50,16 +43,10 @@ pub fn request_fixture(
        .unwrap();
    let transcripts_commitment_config = transcript_commitment_builder.build().unwrap();

-    // Prover constructs encoding tree.
-    let encoding_tree = EncodingTree::new(
-        &encoding_hasher,
-        transcripts_commitment_config.iter_encoding(),
-        &encodings_provider,
-    )
-    .unwrap();
-
    let mut builder = RequestConfig::builder();

+    builder.transcript_commit(transcripts_commitment_config);
+
    for extension in extensions {
        builder.extension(extension);
    }
@@ -74,10 +61,7 @@ pub fn request_fixture(

    let (request, _) = request_builder.build(&provider).unwrap();

-    RequestFixture {
-        encoding_tree,
-        request,
-    }
+    RequestFixture { request }
 }

 /// Returns an attestation fixture for testing.
--- a/crates/attestation/src/lib.rs
+++ b/crates/attestation/src/lib.rs
@@ -79,8 +79,6 @@
 //!
 //! // Specify all the transcript commitments we want to make.
 //! builder
-//!     // Use BLAKE3 for encoding commitments.
-//!     .encoding_hash_alg(HashAlgId::BLAKE3)
 //!     // Commit to all sent data.
 //!     .commit_sent(&(0..sent_len))?
 //!     // Commit to the first 10 bytes of sent data.
@@ -129,7 +127,7 @@
 //!
 //! ```no_run
 //! # use tlsn_attestation::{Attestation, CryptoProvider, Secrets, presentation::Presentation};
-//! # use tlsn_core::transcript::{TranscriptCommitmentKind, Direction};
+//! # use tlsn_core::transcript::Direction;
 //! # fn main() -> Result<(), Box<dyn std::error::Error>> {
 //! # let attestation: Attestation = unimplemented!();
 //! # let secrets: Secrets = unimplemented!();
@@ -140,8 +138,6 @@
 //! let mut builder = secrets.transcript_proof_builder();
 //!
 //! builder
-//!     // Use transcript encoding commitments.
-//!     .commitment_kinds(&[TranscriptCommitmentKind::Encoding])
 //!     // Disclose the first 10 bytes of the sent data.
 //!     .reveal(&(0..10), Direction::Sent)?
 //!     // Disclose all of the received data.
@@ -219,7 +215,7 @@ use tlsn_core::{
    connection::{ConnectionInfo, ServerEphemKey},
    hash::{Hash, HashAlgorithm, TypedHash},
    merkle::MerkleTree,
-    transcript::{TranscriptCommitment, encoding::EncoderSecret},
+    transcript::TranscriptCommitment,
 };

 use crate::{
@@ -301,8 +297,6 @@ pub enum FieldKind {
    ServerEphemKey = 0x02,
    /// Server identity commitment.
    ServerIdentityCommitment = 0x03,
-    /// Encoding commitment.
-    EncodingCommitment = 0x04,
    /// Plaintext hash commitment.
    PlaintextHash = 0x05,
 }
@@ -327,7 +321,6 @@ pub struct Body {
    connection_info: Field<ConnectionInfo>,
    server_ephemeral_key: Field<ServerEphemKey>,
    cert_commitment: Field<ServerCertCommitment>,
-    encoder_secret: Option<Field<EncoderSecret>>,
    extensions: Vec<Field<Extension>>,
    transcript_commitments: Vec<Field<TranscriptCommitment>>,
 }
@@ -373,7 +366,6 @@ impl Body {
            connection_info: conn_info,
            server_ephemeral_key,
            cert_commitment,
-            encoder_secret,
            extensions,
            transcript_commitments,
        } = self;
@@ -391,13 +383,6 @@ impl Body {
            ),
        ];

-        if let Some(encoder_secret) = encoder_secret {
-            fields.push((
-                encoder_secret.id,
-                hasher.hash_separated(&encoder_secret.data),
-            ));
-        }
-
        for field in extensions.iter() {
            fields.push((field.id, hasher.hash_separated(&field.data)));
        }
--- a/crates/attestation/src/presentation.rs
+++ b/crates/attestation/src/presentation.rs
@@ -91,11 +91,6 @@ impl Presentation {
                transcript.verify_with_provider(
                    &provider.hash,
                    &attestation.body.connection_info().transcript_length,
-                    attestation
-                        .body
-                        .encoder_secret
-                        .as_ref()
-                        .map(|field| &field.data),
                    attestation.body.transcript_commitments(),
                )
            })
--- a/crates/attestation/src/request.rs
+++ b/crates/attestation/src/request.rs
@@ -144,9 +144,7 @@ impl std::fmt::Display for ErrorKind {
 #[cfg(test)]
 mod test {
    use tlsn_core::{
-        connection::TranscriptLength,
-        fixtures::{ConnectionFixture, encoding_provider},
-        hash::{Blake3, HashAlgId},
+        connection::TranscriptLength, fixtures::ConnectionFixture, hash::HashAlgId,
        transcript::Transcript,
    };
    use tlsn_data_fixtures::http::{request::GET_WITH_HEADER, response::OK_JSON};
@@ -164,13 +162,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
@@ -185,13 +178,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { mut request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { mut request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
@@ -209,13 +197,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { mut request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { mut request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
@@ -233,13 +216,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { mut request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { mut request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
@@ -265,13 +243,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let mut attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
@@ -289,13 +262,8 @@ mod test {
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
        let connection = ConnectionFixture::tlsnotary(transcript.length());

-        let RequestFixture { request, .. } = request_fixture(
-            transcript,
-            encoding_provider(GET_WITH_HEADER, OK_JSON),
-            connection.clone(),
-            Blake3::default(),
-            Vec::new(),
-        );
+        let RequestFixture { request, .. } =
+            request_fixture(transcript, connection.clone(), Vec::new());

        let attestation =
            attestation_fixture(request.clone(), connection, SignatureAlgId::SECP256K1, &[]);
--- a/crates/attestation/src/serialize.rs
+++ b/crates/attestation/src/serialize.rs
@@ -49,6 +49,4 @@ impl_domain_separator!(tlsn_core::connection::ConnectionInfo);
 impl_domain_separator!(tlsn_core::connection::CertBinding);
 impl_domain_separator!(tlsn_core::transcript::TranscriptCommitment);
 impl_domain_separator!(tlsn_core::transcript::TranscriptSecret);
-impl_domain_separator!(tlsn_core::transcript::encoding::EncoderSecret);
-impl_domain_separator!(tlsn_core::transcript::encoding::EncodingCommitment);
 impl_domain_separator!(tlsn_core::transcript::hash::PlaintextHash);
--- a/crates/attestation/tests/api.rs
+++ b/crates/attestation/tests/api.rs
@@ -1,3 +1,5 @@
+use rand::{Rng, SeedableRng, rngs::StdRng};
+use rangeset::set::RangeSet;
 use tlsn_attestation::{
    Attestation, AttestationConfig, CryptoProvider,
    presentation::PresentationOutput,
@@ -6,12 +8,11 @@ use tlsn_attestation::{
 };
 use tlsn_core::{
    connection::{CertBinding, CertBindingV1_2},
-    fixtures::{self, ConnectionFixture, encoder_secret},
-    hash::Blake3,
+    fixtures::ConnectionFixture,
+    hash::{Blake3, Blinder, HashAlgId},
    transcript::{
-        Direction, Transcript, TranscriptCommitConfigBuilder, TranscriptCommitment,
-        TranscriptSecret,
-        encoding::{EncodingCommitment, EncodingTree},
+        Direction, Transcript, TranscriptCommitment, TranscriptSecret,
+        hash::{PlaintextHash, PlaintextHashSecret, hash_plaintext},
    },
 };
 use tlsn_data_fixtures::http::{request::GET_WITH_HEADER, response::OK_JSON};
@@ -19,6 +20,7 @@ use tlsn_data_fixtures::http::{request::GET_WITH_HEADER, response::OK_JSON};
 /// Tests that the attestation protocol and verification work end-to-end
 #[test]
 fn test_api() {
+    let mut rng = StdRng::seed_from_u64(0);
    let mut provider = CryptoProvider::default();

    // Configure signer for Notary
@@ -26,8 +28,6 @@ fn test_api() {

    let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
    let (sent_len, recv_len) = transcript.len();
-    // Plaintext encodings which the Prover obtained from GC evaluation
-    let encodings_provider = fixtures::encoding_provider(GET_WITH_HEADER, OK_JSON);

    // At the end of the TLS connection the Prover holds the:
    let ConnectionFixture {
@@ -44,26 +44,38 @@ fn test_api() {
        unreachable!()
    };

-    // Prover specifies the ranges it wants to commit to.
-    let mut transcript_commitment_builder = TranscriptCommitConfigBuilder::new(&transcript);
-    transcript_commitment_builder
-        .commit_sent(&(0..sent_len))
-        .unwrap()
-        .commit_recv(&(0..recv_len))
-        .unwrap();
+    // Create hash commitments
+    let hasher = Blake3::default();
+    let sent_blinder: Blinder = rng.random();
+    let recv_blinder: Blinder = rng.random();

-    let transcripts_commitment_config = transcript_commitment_builder.build().unwrap();
+    let sent_idx = RangeSet::from(0..sent_len);
+    let recv_idx = RangeSet::from(0..recv_len);

-    // Prover constructs encoding tree.
-    let encoding_tree = EncodingTree::new(
-        &Blake3::default(),
-        transcripts_commitment_config.iter_encoding(),
-        &encodings_provider,
-    )
-    .unwrap();
+    let sent_hash_commitment = PlaintextHash {
+        direction: Direction::Sent,
+        idx: sent_idx.clone(),
+        hash: hash_plaintext(&hasher, transcript.sent(), &sent_blinder),
+    };

-    let encoding_commitment = EncodingCommitment {
-        root: encoding_tree.root(),
+    let recv_hash_commitment = PlaintextHash {
+        direction: Direction::Received,
+        idx: recv_idx.clone(),
+        hash: hash_plaintext(&hasher, transcript.received(), &recv_blinder),
+    };
+
+    let sent_hash_secret = PlaintextHashSecret {
+        direction: Direction::Sent,
+        idx: sent_idx,
+        alg: HashAlgId::BLAKE3,
+        blinder: sent_blinder,
+    };
+
+    let recv_hash_secret = PlaintextHashSecret {
+        direction: Direction::Received,
+        idx: recv_idx,
+        alg: HashAlgId::BLAKE3,
+        blinder: recv_blinder,
    };

    let request_config = RequestConfig::default();
@@ -74,8 +86,14 @@ fn test_api() {
        .handshake_data(server_cert_data)
        .transcript(transcript)
        .transcript_commitments(
-            vec![TranscriptSecret::Encoding(encoding_tree)],
-            vec![TranscriptCommitment::Encoding(encoding_commitment.clone())],
+            vec![
+                TranscriptSecret::Hash(sent_hash_secret),
+                TranscriptSecret::Hash(recv_hash_secret),
+            ],
+            vec![
+                TranscriptCommitment::Hash(sent_hash_commitment.clone()),
+                TranscriptCommitment::Hash(recv_hash_commitment.clone()),
+            ],
        );

    let (request, secrets) = request_builder.build(&provider).unwrap();
@@ -95,8 +113,10 @@ fn test_api() {
        .connection_info(connection_info.clone())
        // Server key Notary received during handshake
        .server_ephemeral_key(server_ephemeral_key)
-        .encoder_secret(encoder_secret())
-        .transcript_commitments(vec![TranscriptCommitment::Encoding(encoding_commitment)]);
+        .transcript_commitments(vec![
+            TranscriptCommitment::Hash(sent_hash_commitment),
+            TranscriptCommitment::Hash(recv_hash_commitment),
+        ]);

    let attestation = attestation_builder.build(&provider).unwrap();

--- a/crates/core/src/fixtures.rs
+++ b/crates/core/src/fixtures.rs
@@ -1,10 +1,7 @@
 //! Fixtures for testing

-mod provider;
 pub mod transcript;

-pub use provider::FixtureEncodingProvider;
-
 use hex::FromHex;

 use crate::{
@@ -13,10 +10,6 @@ use crate::{
        ServerEphemKey, ServerName, ServerSignature, SignatureAlgorithm, TlsVersion,
        TranscriptLength,
    },
-    transcript::{
-        encoding::{EncoderSecret, EncodingProvider},
-        Transcript,
-    },
    webpki::CertificateDer,
 };

@@ -129,27 +122,3 @@ impl ConnectionFixture {
        server_ephemeral_key
    }
 }
-
-/// Returns an encoding provider fixture.
-pub fn encoding_provider(tx: &[u8], rx: &[u8]) -> impl EncodingProvider {
-    let secret = encoder_secret();
-    FixtureEncodingProvider::new(&secret, Transcript::new(tx, rx))
-}
-
-/// Seed fixture.
-const SEED: [u8; 32] = [0; 32];
-
-/// Delta fixture.
-const DELTA: [u8; 16] = [1; 16];
-
-/// Returns an encoder secret fixture.
-pub fn encoder_secret() -> EncoderSecret {
-    EncoderSecret::new(SEED, DELTA)
-}
-
-/// Returns a tampered encoder secret fixture.
-pub fn encoder_secret_tampered_seed() -> EncoderSecret {
-    let mut seed = SEED;
-    seed[0] += 1;
-    EncoderSecret::new(seed, DELTA)
-}
--- a/crates/core/src/fixtures/provider.rs
+++ b/crates/core/src/fixtures/provider.rs
@@ -1,41 +0,0 @@
-use std::ops::Range;
-
-use crate::transcript::{
-    encoding::{new_encoder, Encoder, EncoderSecret, EncodingProvider, EncodingProviderError},
-    Direction, Transcript,
-};
-
-/// A encoding provider fixture.
-pub struct FixtureEncodingProvider {
-    encoder: Box<dyn Encoder>,
-    transcript: Transcript,
-}
-
-impl FixtureEncodingProvider {
-    /// Creates a new encoding provider fixture.
-    pub(crate) fn new(secret: &EncoderSecret, transcript: Transcript) -> Self {
-        Self {
-            encoder: Box::new(new_encoder(secret)),
-            transcript,
-        }
-    }
-}
-
-impl EncodingProvider for FixtureEncodingProvider {
-    fn provide_encoding(
-        &self,
-        direction: Direction,
-        range: Range<usize>,
-        dest: &mut Vec<u8>,
-    ) -> Result<(), EncodingProviderError> {
-        let transcript = match direction {
-            Direction::Sent => &self.transcript.sent(),
-            Direction::Received => &self.transcript.received(),
-        };
-
-        let data = transcript.get(range.clone()).ok_or(EncodingProviderError)?;
-        self.encoder.encode_data(direction, range, data, dest);
-
-        Ok(())
-    }
-}
--- a/crates/core/src/lib.rs
+++ b/crates/core/src/lib.rs
@@ -19,9 +19,7 @@ use serde::{Deserialize, Serialize};

 use crate::{
    connection::ServerName,
-    transcript::{
-        encoding::EncoderSecret, PartialTranscript, TranscriptCommitment, TranscriptSecret,
-    },
+    transcript::{PartialTranscript, TranscriptCommitment, TranscriptSecret},
 };

 /// Prover output.
@@ -42,8 +40,6 @@ pub struct VerifierOutput {
    pub server_name: Option<ServerName>,
    /// Transcript data.
    pub transcript: Option<PartialTranscript>,
-    /// Encoding commitment secret.
-    pub encoder_secret: Option<EncoderSecret>,
    /// Transcript commitments.
    pub transcript_commitments: Vec<TranscriptCommitment>,
 }
--- a/crates/core/src/merkle.rs
+++ b/crates/core/src/merkle.rs
@@ -63,11 +63,6 @@ impl MerkleProof {

        Ok(())
    }
-
-    /// Returns the leaf count of the Merkle tree associated with the proof.
-    pub(crate) fn leaf_count(&self) -> usize {
-        self.leaf_count
-    }
 }

 #[derive(Clone)]
--- a/crates/core/src/transcript.rs
+++ b/crates/core/src/transcript.rs
@@ -19,7 +19,6 @@
 //! withheld.

 mod commit;
-pub mod encoding;
 pub mod hash;
 mod proof;
 mod tls;
@@ -110,8 +109,14 @@ impl Transcript {
        }

        Some(
-            Subsequence::new(idx.clone(), data.index(idx).flatten().copied().collect())
-                .expect("data is same length as index"),
+            Subsequence::new(
+                idx.clone(),
+                data.index(idx).fold(Vec::new(), |mut acc, s| {
+                    acc.extend_from_slice(s);
+                    acc
+                }),
+            )
+            .expect("data is same length as index"),
        )
    }

@@ -190,18 +195,20 @@ pub struct CompressedPartialTranscript {
 impl From<PartialTranscript> for CompressedPartialTranscript {
    fn from(uncompressed: PartialTranscript) -> Self {
        Self {
-            sent_authed: uncompressed
-                .sent
-                .index(&uncompressed.sent_authed_idx)
-                .flatten()
-                .copied()
-                .collect(),
+            sent_authed: uncompressed.sent.index(&uncompressed.sent_authed_idx).fold(
+                Vec::new(),
+                |mut acc, s| {
+                    acc.extend_from_slice(s);
+                    acc
+                },
+            ),
            received_authed: uncompressed
                .received
                .index(&uncompressed.received_authed_idx)
-                .flatten()
-                .copied()
-                .collect(),
+                .fold(Vec::new(), |mut acc, s| {
+                    acc.extend_from_slice(s);
+                    acc
+                }),
            sent_idx: uncompressed.sent_authed_idx,
            recv_idx: uncompressed.received_authed_idx,
            sent_total: uncompressed.sent.len(),
--- a/crates/core/src/transcript/commit.rs
+++ b/crates/core/src/transcript/commit.rs
@@ -8,27 +8,15 @@ use serde::{Deserialize, Serialize};
 use crate::{
    hash::HashAlgId,
    transcript::{
-        encoding::{EncodingCommitment, EncodingTree},
        hash::{PlaintextHash, PlaintextHashSecret},
        Direction, RangeSet, Transcript,
    },
 };

-/// The maximum allowed total bytelength of committed data for a single
-/// commitment kind. Used to prevent DoS during verification. (May cause the
-/// verifier to hash up to a max of 1GB * 128 = 128GB of data for certain kinds
-/// of encoding commitments.)
-///
-/// This value must not exceed bcs's MAX_SEQUENCE_LENGTH limit (which is (1 <<
-/// 31) - 1 by default)
-pub(crate) const MAX_TOTAL_COMMITTED_DATA: usize = 1_000_000_000;
-
 /// Kind of transcript commitment.
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
 #[non_exhaustive]
 pub enum TranscriptCommitmentKind {
-    /// A commitment to encodings of the transcript.
-    Encoding,
    /// A hash commitment to plaintext in the transcript.
    Hash {
        /// The hash algorithm used.
@@ -39,7 +27,6 @@ pub enum TranscriptCommitmentKind {
 impl fmt::Display for TranscriptCommitmentKind {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
-            Self::Encoding => f.write_str("encoding"),
            Self::Hash { alg } => write!(f, "hash ({alg})"),
        }
    }
@@ -49,8 +36,6 @@ impl fmt::Display for TranscriptCommitmentKind {
 #[derive(Debug, Clone, Serialize, Deserialize)]
 #[non_exhaustive]
 pub enum TranscriptCommitment {
-    /// Encoding commitment.
-    Encoding(EncodingCommitment),
    /// Plaintext hash commitment.
    Hash(PlaintextHash),
 }
@@ -59,8 +44,6 @@ pub enum TranscriptCommitment {
 #[derive(Debug, Clone, Serialize, Deserialize)]
 #[non_exhaustive]
 pub enum TranscriptSecret {
-    /// Encoding tree.
-    Encoding(EncodingTree),
    /// Plaintext hash secret.
    Hash(PlaintextHashSecret),
 }
@@ -68,9 +51,6 @@ pub enum TranscriptSecret {
 /// Configuration for transcript commitments.
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct TranscriptCommitConfig {
-    encoding_hash_alg: HashAlgId,
-    has_encoding: bool,
-    has_hash: bool,
    commits: Vec<((Direction, RangeSet<usize>), TranscriptCommitmentKind)>,
 }

@@ -80,53 +60,23 @@ impl TranscriptCommitConfig {
        TranscriptCommitConfigBuilder::new(transcript)
    }

-    /// Returns the hash algorithm to use for encoding commitments.
-    pub fn encoding_hash_alg(&self) -> &HashAlgId {
-        &self.encoding_hash_alg
-    }
-
-    /// Returns `true` if the configuration has any encoding commitments.
-    pub fn has_encoding(&self) -> bool {
-        self.has_encoding
-    }
-
    /// Returns `true` if the configuration has any hash commitments.
    pub fn has_hash(&self) -> bool {
-        self.has_hash
-    }
-
-    /// Returns an iterator over the encoding commitment indices.
-    pub fn iter_encoding(&self) -> impl Iterator<Item = &(Direction, RangeSet<usize>)> {
-        self.commits.iter().filter_map(|(idx, kind)| match kind {
-            TranscriptCommitmentKind::Encoding => Some(idx),
-            _ => None,
-        })
+        self.commits
+            .iter()
+            .any(|(_, kind)| matches!(kind, TranscriptCommitmentKind::Hash { .. }))
    }

    /// Returns an iterator over the hash commitment indices.
    pub fn iter_hash(&self) -> impl Iterator<Item = (&(Direction, RangeSet<usize>), &HashAlgId)> {
-        self.commits.iter().filter_map(|(idx, kind)| match kind {
-            TranscriptCommitmentKind::Hash { alg } => Some((idx, alg)),
-            _ => None,
+        self.commits.iter().map(|(idx, kind)| match kind {
+            TranscriptCommitmentKind::Hash { alg } => (idx, alg),
        })
    }

    /// Returns a request for the transcript commitments.
    pub fn to_request(&self) -> TranscriptCommitRequest {
        TranscriptCommitRequest {
-            encoding: self.has_encoding.then(|| {
-                let mut sent = RangeSet::default();
-                let mut recv = RangeSet::default();
-
-                for (dir, idx) in self.iter_encoding() {
-                    match dir {
-                        Direction::Sent => sent.union_mut(idx),
-                        Direction::Received => recv.union_mut(idx),
-                    }
-                }
-
-                (sent, recv)
-            }),
            hash: self
                .iter_hash()
                .map(|((dir, idx), alg)| (*dir, idx.clone(), *alg))
@@ -136,15 +86,9 @@ impl TranscriptCommitConfig {
 }

 /// A builder for [`TranscriptCommitConfig`].
-///
-/// The default hash algorithm is [`HashAlgId::BLAKE3`] and the default kind
-/// is [`TranscriptCommitmentKind::Encoding`].
 #[derive(Debug)]
 pub struct TranscriptCommitConfigBuilder<'a> {
    transcript: &'a Transcript,
-    encoding_hash_alg: HashAlgId,
-    has_encoding: bool,
-    has_hash: bool,
    default_kind: TranscriptCommitmentKind,
    commits: HashSet<((Direction, RangeSet<usize>), TranscriptCommitmentKind)>,
 }
@@ -154,20 +98,13 @@ impl<'a> TranscriptCommitConfigBuilder<'a> {
    pub fn new(transcript: &'a Transcript) -> Self {
        Self {
            transcript,
-            encoding_hash_alg: HashAlgId::BLAKE3,
-            has_encoding: false,
-            has_hash: false,
-            default_kind: TranscriptCommitmentKind::Encoding,
+            default_kind: TranscriptCommitmentKind::Hash {
+                alg: HashAlgId::BLAKE3,
+            },
            commits: HashSet::default(),
        }
    }

-    /// Sets the hash algorithm to use for encoding commitments.
-    pub fn encoding_hash_alg(&mut self, alg: HashAlgId) -> &mut Self {
-        self.encoding_hash_alg = alg;
-        self
-    }
-
    /// Sets the default kind of commitment to use.
    pub fn default_kind(&mut self, default_kind: TranscriptCommitmentKind) -> &mut Self {
        self.default_kind = default_kind;
@@ -201,11 +138,6 @@ impl<'a> TranscriptCommitConfigBuilder<'a> {
            ));
        }

-        match kind {
-            TranscriptCommitmentKind::Encoding => self.has_encoding = true,
-            TranscriptCommitmentKind::Hash { .. } => self.has_hash = true,
-        }
-
        self.commits.insert(((direction, idx), kind));

        Ok(self)
@@ -252,9 +184,6 @@ impl<'a> TranscriptCommitConfigBuilder<'a> {
    /// Builds the configuration.
    pub fn build(self) -> Result<TranscriptCommitConfig, TranscriptCommitConfigBuilderError> {
        Ok(TranscriptCommitConfig {
-            encoding_hash_alg: self.encoding_hash_alg,
-            has_encoding: self.has_encoding,
-            has_hash: self.has_hash,
            commits: Vec::from_iter(self.commits),
        })
    }
@@ -301,16 +230,10 @@ impl fmt::Display for TranscriptCommitConfigBuilderError {
 /// Request to compute transcript commitments.
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct TranscriptCommitRequest {
-    encoding: Option<(RangeSet<usize>, RangeSet<usize>)>,
    hash: Vec<(Direction, RangeSet<usize>, HashAlgId)>,
 }

 impl TranscriptCommitRequest {
-    /// Returns `true` if an encoding commitment is requested.
-    pub fn has_encoding(&self) -> bool {
-        self.encoding.is_some()
-    }
-
    /// Returns `true` if a hash commitment is requested.
    pub fn has_hash(&self) -> bool {
        !self.hash.is_empty()
@@ -320,11 +243,6 @@ impl TranscriptCommitRequest {
    pub fn iter_hash(&self) -> impl Iterator<Item = &(Direction, RangeSet<usize>, HashAlgId)> {
        self.hash.iter()
    }
-
-    /// Returns the ranges of the encoding commitments.
-    pub fn encoding(&self) -> Option<&(RangeSet<usize>, RangeSet<usize>)> {
-        self.encoding.as_ref()
-    }
 }

 #[cfg(test)]
--- a/crates/core/src/transcript/encoding.rs
+++ b/crates/core/src/transcript/encoding.rs
@@ -1,22 +0,0 @@
-//! Transcript encoding commitments and proofs.
-
-mod encoder;
-mod proof;
-mod provider;
-mod tree;
-
-pub use encoder::{new_encoder, Encoder, EncoderSecret};
-pub use proof::{EncodingProof, EncodingProofError};
-pub use provider::{EncodingProvider, EncodingProviderError};
-pub use tree::{EncodingTree, EncodingTreeError};
-
-use serde::{Deserialize, Serialize};
-
-use crate::hash::TypedHash;
-
-/// Transcript encoding commitment.
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct EncodingCommitment {
-    /// Merkle root of the encoding commitments.
-    pub root: TypedHash,
-}
--- a/crates/core/src/transcript/encoding/encoder.rs
+++ b/crates/core/src/transcript/encoding/encoder.rs
@@ -1,137 +0,0 @@
-use std::ops::Range;
-
-use crate::transcript::Direction;
-use itybity::ToBits;
-use rand::{RngCore, SeedableRng};
-use rand_chacha::ChaCha12Rng;
-use serde::{Deserialize, Serialize};
-
-/// The size of the encoding for 1 bit, in bytes.
-const BIT_ENCODING_SIZE: usize = 16;
-/// The size of the encoding for 1 byte, in bytes.
-const BYTE_ENCODING_SIZE: usize = 128;
-
-/// Secret used by an encoder to generate encodings.
-#[derive(Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct EncoderSecret {
-    seed: [u8; 32],
-    delta: [u8; BIT_ENCODING_SIZE],
-}
-
-opaque_debug::implement!(EncoderSecret);
-
-impl EncoderSecret {
-    /// Creates a new secret.
-    ///
-    /// # Arguments
-    ///
-    /// * `seed` - The seed for the PRG.
-    /// * `delta` - Delta for deriving the one-encodings.
-    pub fn new(seed: [u8; 32], delta: [u8; 16]) -> Self {
-        Self { seed, delta }
-    }
-
-    /// Returns the seed.
-    pub fn seed(&self) -> &[u8; 32] {
-        &self.seed
-    }
-
-    /// Returns the delta.
-    pub fn delta(&self) -> &[u8; 16] {
-        &self.delta
-    }
-}
-
-/// Creates a new encoder.
-pub fn new_encoder(secret: &EncoderSecret) -> impl Encoder {
-    ChaChaEncoder::new(secret)
-}
-
-pub(crate) struct ChaChaEncoder {
-    seed: [u8; 32],
-    delta: [u8; 16],
-}
-
-impl ChaChaEncoder {
-    pub(crate) fn new(secret: &EncoderSecret) -> Self {
-        let seed = *secret.seed();
-        let delta = *secret.delta();
-
-        Self { seed, delta }
-    }
-
-    pub(crate) fn new_prg(&self, stream_id: u64) -> ChaCha12Rng {
-        let mut prg = ChaCha12Rng::from_seed(self.seed);
-        prg.set_stream(stream_id);
-        prg.set_word_pos(0);
-        prg
-    }
-}
-
-/// A transcript encoder.
-///
-/// This is an internal implementation detail that should not be exposed to the
-/// public API.
-pub trait Encoder {
-    /// Writes the zero encoding for the given range of the transcript into the
-    /// destination buffer.
-    fn encode_range(&self, direction: Direction, range: Range<usize>, dest: &mut Vec<u8>);
-
-    /// Writes the encoding for the given data into the destination buffer.
-    fn encode_data(
-        &self,
-        direction: Direction,
-        range: Range<usize>,
-        data: &[u8],
-        dest: &mut Vec<u8>,
-    );
-}
-
-impl Encoder for ChaChaEncoder {
-    fn encode_range(&self, direction: Direction, range: Range<usize>, dest: &mut Vec<u8>) {
-        // ChaCha encoder works with 32-bit words. Each encoded bit is 128 bits long.
-        const WORDS_PER_BYTE: u128 = 8 * 128 / 32;
-
-        let stream_id: u64 = match direction {
-            Direction::Sent => 0,
-            Direction::Received => 1,
-        };
-
-        let mut prg = self.new_prg(stream_id);
-        let len = range.len() * BYTE_ENCODING_SIZE;
-        let pos = dest.len();
-
-        // Write 0s to the destination buffer.
-        dest.resize(pos + len, 0);
-
-        // Fill the destination buffer with the PRG.
-        prg.set_word_pos(range.start as u128 * WORDS_PER_BYTE);
-        prg.fill_bytes(&mut dest[pos..pos + len]);
-    }
-
-    fn encode_data(
-        &self,
-        direction: Direction,
-        range: Range<usize>,
-        data: &[u8],
-        dest: &mut Vec<u8>,
-    ) {
-        const ZERO: [u8; 16] = [0; BIT_ENCODING_SIZE];
-
-        let pos = dest.len();
-
-        // Write the zero encoding for the given range.
-        self.encode_range(direction, range, dest);
-        let dest = &mut dest[pos..];
-
-        for (pos, bit) in data.iter_lsb0().enumerate() {
-            // Add the delta to the encoding whenever the encoded bit is 1,
-            // otherwise add a zero.
-            let summand = if bit { &self.delta } else { &ZERO };
-            dest[pos * BIT_ENCODING_SIZE..(pos + 1) * BIT_ENCODING_SIZE]
-                .iter_mut()
-                .zip(summand)
-                .for_each(|(a, b)| *a ^= *b);
-        }
-    }
-}
--- a/crates/core/src/transcript/encoding/proof.rs
+++ b/crates/core/src/transcript/encoding/proof.rs
@@ -1,361 +0,0 @@
-use std::{collections::HashMap, fmt};
-
-use rangeset::set::RangeSet;
-use serde::{Deserialize, Serialize};
-
-use crate::{
-    hash::{Blinder, HashProvider, HashProviderError},
-    merkle::{MerkleError, MerkleProof},
-    transcript::{
-        commit::MAX_TOTAL_COMMITTED_DATA,
-        encoding::{new_encoder, Encoder, EncoderSecret, EncodingCommitment},
-        Direction,
-    },
-};
-
-/// An opening of a leaf in the encoding tree.
-#[derive(Clone, Serialize, Deserialize)]
-pub(super) struct Opening {
-    pub(super) direction: Direction,
-    pub(super) idx: RangeSet<usize>,
-    pub(super) blinder: Blinder,
-}
-
-opaque_debug::implement!(Opening);
-
-/// An encoding commitment proof.
-#[derive(Debug, Clone, Serialize, Deserialize)]
-#[serde(try_from = "validation::EncodingProofUnchecked")]
-pub struct EncodingProof {
-    /// The proof of inclusion of the commitment(s) in the Merkle tree of
-    /// commitments.
-    pub(super) inclusion_proof: MerkleProof,
-    pub(super) openings: HashMap<usize, Opening>,
-}
-
-impl EncodingProof {
-    /// Verifies the proof against the commitment.
-    ///
-    /// Returns the authenticated indices of the sent and received data,
-    /// respectively.
-    ///
-    /// # Arguments
-    ///
-    /// * `provider` - Hash provider.
-    /// * `commitment` - Encoding commitment to verify against.
-    /// * `sent` - Sent data to authenticate.
-    /// * `recv` - Received data to authenticate.
-    pub fn verify_with_provider(
-        &self,
-        provider: &HashProvider,
-        secret: &EncoderSecret,
-        commitment: &EncodingCommitment,
-        sent: &[u8],
-        recv: &[u8],
-    ) -> Result<(RangeSet<usize>, RangeSet<usize>), EncodingProofError> {
-        let hasher = provider.get(&commitment.root.alg)?;
-
-        let encoder = new_encoder(secret);
-        let Self {
-            inclusion_proof,
-            openings,
-        } = self;
-
-        let mut leaves = Vec::with_capacity(openings.len());
-        let mut expected_leaf = Vec::default();
-        let mut total_opened = 0u128;
-        let mut auth_sent = RangeSet::default();
-        let mut auth_recv = RangeSet::default();
-        for (
-            id,
-            Opening {
-                direction,
-                idx,
-                blinder,
-            },
-        ) in openings
-        {
-            // Make sure the amount of data being proved is bounded.
-            total_opened += idx.len() as u128;
-            if total_opened > MAX_TOTAL_COMMITTED_DATA as u128 {
-                return Err(EncodingProofError::new(
-                    ErrorKind::Proof,
-                    "exceeded maximum allowed data",
-                ))?;
-            }
-
-            let (data, auth) = match direction {
-                Direction::Sent => (sent, &mut auth_sent),
-                Direction::Received => (recv, &mut auth_recv),
-            };
-
-            // Make sure the ranges are within the bounds of the transcript.
-            if idx.end().unwrap_or(0) > data.len() {
-                return Err(EncodingProofError::new(
-                    ErrorKind::Proof,
-                    format!(
-                        "index out of bounds of the transcript ({}): {} > {}",
-                        direction,
-                        idx.end().unwrap_or(0),
-                        data.len()
-                    ),
-                ));
-            }
-
-            expected_leaf.clear();
-            for range in idx.iter() {
-                encoder.encode_data(*direction, range.clone(), &data[range], &mut expected_leaf);
-            }
-            expected_leaf.extend_from_slice(blinder.as_bytes());
-
-            // Compute the expected hash of the commitment to make sure it is
-            // present in the merkle tree.
-            leaves.push((*id, hasher.hash(&expected_leaf)));
-
-            auth.union_mut(idx);
-        }
-
-        // Verify that the expected hashes are present in the merkle tree.
-        //
-        // This proves the Prover committed to the purported data prior to the encoder
-        // seed being revealed. Ergo, if the encodings are authentic then the purported
-        // data is authentic.
-        inclusion_proof.verify(hasher, &commitment.root, leaves)?;
-
-        Ok((auth_sent, auth_recv))
-    }
-}
-
-/// Error for [`EncodingProof`].
-#[derive(Debug, thiserror::Error)]
-pub struct EncodingProofError {
-    kind: ErrorKind,
-    source: Option<Box<dyn std::error::Error + Send + Sync>>,
-}
-
-impl EncodingProofError {
-    fn new<E>(kind: ErrorKind, source: E) -> Self
-    where
-        E: Into<Box<dyn std::error::Error + Send + Sync>>,
-    {
-        Self {
-            kind,
-            source: Some(source.into()),
-        }
-    }
-}
-
-#[derive(Debug)]
-enum ErrorKind {
-    Provider,
-    Proof,
-}
-
-impl fmt::Display for EncodingProofError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str("encoding proof error: ")?;
-
-        match self.kind {
-            ErrorKind::Provider => f.write_str("provider error")?,
-            ErrorKind::Proof => f.write_str("proof error")?,
-        }
-
-        if let Some(source) = &self.source {
-            write!(f, " caused by: {source}")?;
-        }
-
-        Ok(())
-    }
-}
-
-impl From<HashProviderError> for EncodingProofError {
-    fn from(error: HashProviderError) -> Self {
-        Self::new(ErrorKind::Provider, error)
-    }
-}
-
-impl From<MerkleError> for EncodingProofError {
-    fn from(error: MerkleError) -> Self {
-        Self::new(ErrorKind::Proof, error)
-    }
-}
-
-/// Invalid encoding proof error.
-#[derive(Debug, thiserror::Error)]
-#[error("invalid encoding proof: {0}")]
-pub struct InvalidEncodingProof(&'static str);
-
-mod validation {
-    use super::*;
-
-    /// The maximum allowed height of the Merkle tree of encoding commitments.
-    ///
-    /// The statistical security parameter (SSP) of the encoding commitment
-    /// protocol is calculated as "the number of uniformly random bits in a
-    /// single bit's encoding minus `MAX_HEIGHT`".
-    ///
-    /// For example, a bit encoding used in garbled circuits typically has 127
-    /// uniformly random bits, hence when using it in the encoding
-    /// commitment protocol, the SSP is 127 - 30 = 97 bits.
-    ///
-    /// Leaving this validation here as a fail-safe in case we ever start
-    /// using shorter encodings.
-    const MAX_HEIGHT: usize = 30;
-
-    #[derive(Debug, Deserialize)]
-    pub(super) struct EncodingProofUnchecked {
-        inclusion_proof: MerkleProof,
-        openings: HashMap<usize, Opening>,
-    }
-
-    impl TryFrom<EncodingProofUnchecked> for EncodingProof {
-        type Error = InvalidEncodingProof;
-
-        fn try_from(unchecked: EncodingProofUnchecked) -> Result<Self, Self::Error> {
-            if unchecked.inclusion_proof.leaf_count() > 1 << MAX_HEIGHT {
-                return Err(InvalidEncodingProof(
-                    "the height of the tree exceeds the maximum allowed",
-                ));
-            }
-
-            Ok(Self {
-                inclusion_proof: unchecked.inclusion_proof,
-                openings: unchecked.openings,
-            })
-        }
-    }
-}
-
-#[cfg(test)]
-mod test {
-    use tlsn_data_fixtures::http::{request::POST_JSON, response::OK_JSON};
-
-    use crate::{
-        fixtures::{encoder_secret, encoder_secret_tampered_seed, encoding_provider},
-        hash::Blake3,
-        transcript::{encoding::EncodingTree, Transcript},
-    };
-
-    use super::*;
-
-    struct EncodingFixture {
-        transcript: Transcript,
-        proof: EncodingProof,
-        commitment: EncodingCommitment,
-    }
-
-    fn new_encoding_fixture() -> EncodingFixture {
-        let transcript = Transcript::new(POST_JSON, OK_JSON);
-
-        let idx_0 = (Direction::Sent, RangeSet::from(0..POST_JSON.len()));
-        let idx_1 = (Direction::Received, RangeSet::from(0..OK_JSON.len()));
-
-        let provider = encoding_provider(transcript.sent(), transcript.received());
-        let tree = EncodingTree::new(&Blake3::default(), [&idx_0, &idx_1], &provider).unwrap();
-
-        let proof = tree.proof([&idx_0, &idx_1].into_iter()).unwrap();
-
-        let commitment = EncodingCommitment { root: tree.root() };
-
-        EncodingFixture {
-            transcript,
-            proof,
-            commitment,
-        }
-    }
-
-    #[test]
-    fn test_verify_encoding_proof_tampered_seed() {
-        let EncodingFixture {
-            transcript,
-            proof,
-            commitment,
-        } = new_encoding_fixture();
-
-        let err = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret_tampered_seed(),
-                &commitment,
-                transcript.sent(),
-                transcript.received(),
-            )
-            .unwrap_err();
-
-        assert!(matches!(err.kind, ErrorKind::Proof));
-    }
-
-    #[test]
-    fn test_verify_encoding_proof_out_of_range() {
-        let EncodingFixture {
-            transcript,
-            proof,
-            commitment,
-        } = new_encoding_fixture();
-
-        let sent = &transcript.sent()[transcript.sent().len() - 1..];
-        let recv = &transcript.received()[transcript.received().len() - 2..];
-
-        let err = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret(),
-                &commitment,
-                sent,
-                recv,
-            )
-            .unwrap_err();
-
-        assert!(matches!(err.kind, ErrorKind::Proof));
-    }
-
-    #[test]
-    fn test_verify_encoding_proof_tampered_idx() {
-        let EncodingFixture {
-            transcript,
-            mut proof,
-            commitment,
-        } = new_encoding_fixture();
-
-        let Opening { idx, .. } = proof.openings.values_mut().next().unwrap();
-
-        *idx = RangeSet::from([0..3, 13..15]);
-
-        let err = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret(),
-                &commitment,
-                transcript.sent(),
-                transcript.received(),
-            )
-            .unwrap_err();
-
-        assert!(matches!(err.kind, ErrorKind::Proof));
-    }
-
-    #[test]
-    fn test_verify_encoding_proof_tampered_encoding_blinder() {
-        let EncodingFixture {
-            transcript,
-            mut proof,
-            commitment,
-        } = new_encoding_fixture();
-
-        let Opening { blinder, .. } = proof.openings.values_mut().next().unwrap();
-
-        *blinder = rand::random();
-
-        let err = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret(),
-                &commitment,
-                transcript.sent(),
-                transcript.received(),
-            )
-            .unwrap_err();
-
-        assert!(matches!(err.kind, ErrorKind::Proof));
-    }
-}
--- a/crates/core/src/transcript/encoding/provider.rs
+++ b/crates/core/src/transcript/encoding/provider.rs
@@ -1,19 +0,0 @@
-use std::ops::Range;
-
-use crate::transcript::Direction;
-
-/// A provider of plaintext encodings.
-pub trait EncodingProvider {
-    /// Writes the encoding of the given range into the destination buffer.
-    fn provide_encoding(
-        &self,
-        direction: Direction,
-        range: Range<usize>,
-        dest: &mut Vec<u8>,
-    ) -> Result<(), EncodingProviderError>;
-}
-
-/// Error for [`EncodingProvider`].
-#[derive(Debug, thiserror::Error)]
-#[error("failed to provide encoding")]
-pub struct EncodingProviderError;
--- a/crates/core/src/transcript/encoding/tree.rs
+++ b/crates/core/src/transcript/encoding/tree.rs
@@ -1,327 +0,0 @@
-use std::collections::HashMap;
-
-use bimap::BiMap;
-use rangeset::set::RangeSet;
-use serde::{Deserialize, Serialize};
-
-use crate::{
-    hash::{Blinder, HashAlgId, HashAlgorithm, TypedHash},
-    merkle::MerkleTree,
-    transcript::{
-        encoding::{
-            proof::{EncodingProof, Opening},
-            EncodingProvider,
-        },
-        Direction,
-    },
-};
-
-/// Encoding tree builder error.
-#[derive(Debug, thiserror::Error)]
-pub enum EncodingTreeError {
-    /// Index is out of bounds of the transcript.
-    #[error("index is out of bounds of the transcript")]
-    OutOfBounds {
-        /// The index.
-        index: RangeSet<usize>,
-        /// The transcript length.
-        transcript_length: usize,
-    },
-    /// Encoding provider is missing an encoding for an index.
-    #[error("encoding provider is missing an encoding for an index")]
-    MissingEncoding {
-        /// The index which is missing.
-        index: RangeSet<usize>,
-    },
-    /// Index is missing from the tree.
-    #[error("index is missing from the tree")]
-    MissingLeaf {
-        /// The index which is missing.
-        index: RangeSet<usize>,
-    },
-}
-
-/// A merkle tree of transcript encodings.
-#[derive(Clone, Serialize, Deserialize)]
-pub struct EncodingTree {
-    /// Merkle tree of the commitments.
-    tree: MerkleTree,
-    /// Nonces used to blind the hashes.
-    blinders: Vec<Blinder>,
-    /// Mapping between the index of a leaf and the transcript index it
-    /// corresponds to.
-    idxs: BiMap<usize, (Direction, RangeSet<usize>)>,
-    /// Union of all transcript indices in the sent direction.
-    sent_idx: RangeSet<usize>,
-    /// Union of all transcript indices in the received direction.
-    received_idx: RangeSet<usize>,
-}
-
-opaque_debug::implement!(EncodingTree);
-
-impl EncodingTree {
-    /// Creates a new encoding tree.
-    ///
-    /// # Arguments
-    ///
-    /// * `hasher` - The hash algorithm to use.
-    /// * `idxs` - The subsequence indices to commit to.
-    /// * `provider` - The encoding provider.
-    pub fn new<'idx>(
-        hasher: &dyn HashAlgorithm,
-        idxs: impl IntoIterator<Item = &'idx (Direction, RangeSet<usize>)>,
-        provider: &dyn EncodingProvider,
-    ) -> Result<Self, EncodingTreeError> {
-        let mut this = Self {
-            tree: MerkleTree::new(hasher.id()),
-            blinders: Vec::new(),
-            idxs: BiMap::new(),
-            sent_idx: RangeSet::default(),
-            received_idx: RangeSet::default(),
-        };
-
-        let mut leaves = Vec::new();
-        let mut encoding = Vec::new();
-        for dir_idx in idxs {
-            let direction = dir_idx.0;
-            let idx = &dir_idx.1;
-
-            // Ignore empty indices.
-            if idx.is_empty() {
-                continue;
-            }
-
-            if this.idxs.contains_right(dir_idx) {
-                // The subsequence is already in the tree.
-                continue;
-            }
-
-            let blinder: Blinder = rand::random();
-
-            encoding.clear();
-            for range in idx.iter() {
-                provider
-                    .provide_encoding(direction, range, &mut encoding)
-                    .map_err(|_| EncodingTreeError::MissingEncoding { index: idx.clone() })?;
-            }
-            encoding.extend_from_slice(blinder.as_bytes());
-
-            let leaf = hasher.hash(&encoding);
-
-            leaves.push(leaf);
-            this.blinders.push(blinder);
-            this.idxs.insert(this.idxs.len(), dir_idx.clone());
-            match direction {
-                Direction::Sent => this.sent_idx.union_mut(idx),
-                Direction::Received => this.received_idx.union_mut(idx),
-            }
-        }
-
-        this.tree.insert(hasher, leaves);
-
-        Ok(this)
-    }
-
-    /// Returns the root of the tree.
-    pub fn root(&self) -> TypedHash {
-        self.tree.root()
-    }
-
-    /// Returns the hash algorithm of the tree.
-    pub fn algorithm(&self) -> HashAlgId {
-        self.tree.algorithm()
-    }
-
-    /// Generates a proof for the given indices.
-    ///
-    /// # Arguments
-    ///
-    /// * `idxs` - The transcript indices to prove.
-    pub fn proof<'idx>(
-        &self,
-        idxs: impl Iterator<Item = &'idx (Direction, RangeSet<usize>)>,
-    ) -> Result<EncodingProof, EncodingTreeError> {
-        let mut openings = HashMap::new();
-        for dir_idx in idxs {
-            let direction = dir_idx.0;
-            let idx = &dir_idx.1;
-
-            let leaf_idx = *self
-                .idxs
-                .get_by_right(dir_idx)
-                .ok_or_else(|| EncodingTreeError::MissingLeaf { index: idx.clone() })?;
-            let blinder = self.blinders[leaf_idx].clone();
-
-            openings.insert(
-                leaf_idx,
-                Opening {
-                    direction,
-                    idx: idx.clone(),
-                    blinder,
-                },
-            );
-        }
-
-        let mut indices = openings.keys().copied().collect::<Vec<_>>();
-        indices.sort();
-
-        Ok(EncodingProof {
-            inclusion_proof: self.tree.proof(&indices),
-            openings,
-        })
-    }
-
-    /// Returns whether the tree contains the given transcript index.
-    pub fn contains(&self, idx: &(Direction, RangeSet<usize>)) -> bool {
-        self.idxs.contains_right(idx)
-    }
-
-    pub(crate) fn idx(&self, direction: Direction) -> &RangeSet<usize> {
-        match direction {
-            Direction::Sent => &self.sent_idx,
-            Direction::Received => &self.received_idx,
-        }
-    }
-
-    /// Returns the committed transcript indices.
-    pub(crate) fn transcript_indices(&self) -> impl Iterator<Item = &(Direction, RangeSet<usize>)> {
-        self.idxs.right_values()
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::{
-        fixtures::{encoder_secret, encoding_provider},
-        hash::{Blake3, HashProvider},
-        transcript::{encoding::EncodingCommitment, Transcript},
-    };
-    use tlsn_data_fixtures::http::{request::POST_JSON, response::OK_JSON};
-
-    fn new_tree<'seq>(
-        transcript: &Transcript,
-        idxs: impl Iterator<Item = &'seq (Direction, RangeSet<usize>)>,
-    ) -> Result<EncodingTree, EncodingTreeError> {
-        let provider = encoding_provider(transcript.sent(), transcript.received());
-
-        EncodingTree::new(&Blake3::default(), idxs, &provider)
-    }
-
-    #[test]
-    fn test_encoding_tree() {
-        let transcript = Transcript::new(POST_JSON, OK_JSON);
-
-        let idx_0 = (Direction::Sent, RangeSet::from(0..POST_JSON.len()));
-        let idx_1 = (Direction::Received, RangeSet::from(0..OK_JSON.len()));
-
-        let tree = new_tree(&transcript, [&idx_0, &idx_1].into_iter()).unwrap();
-
-        assert!(tree.contains(&idx_0));
-        assert!(tree.contains(&idx_1));
-
-        let proof = tree.proof([&idx_0, &idx_1].into_iter()).unwrap();
-
-        let commitment = EncodingCommitment { root: tree.root() };
-
-        let (auth_sent, auth_recv) = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret(),
-                &commitment,
-                transcript.sent(),
-                transcript.received(),
-            )
-            .unwrap();
-
-        assert_eq!(auth_sent, idx_0.1);
-        assert_eq!(auth_recv, idx_1.1);
-    }
-
-    #[test]
-    fn test_encoding_tree_multiple_ranges() {
-        let transcript = Transcript::new(POST_JSON, OK_JSON);
-
-        let idx_0 = (Direction::Sent, RangeSet::from(0..1));
-        let idx_1 = (Direction::Sent, RangeSet::from(1..POST_JSON.len()));
-        let idx_2 = (Direction::Received, RangeSet::from(0..1));
-        let idx_3 = (Direction::Received, RangeSet::from(1..OK_JSON.len()));
-
-        let tree = new_tree(&transcript, [&idx_0, &idx_1, &idx_2, &idx_3].into_iter()).unwrap();
-
-        assert!(tree.contains(&idx_0));
-        assert!(tree.contains(&idx_1));
-        assert!(tree.contains(&idx_2));
-        assert!(tree.contains(&idx_3));
-
-        let proof = tree
-            .proof([&idx_0, &idx_1, &idx_2, &idx_3].into_iter())
-            .unwrap();
-
-        let commitment = EncodingCommitment { root: tree.root() };
-
-        let (auth_sent, auth_recv) = proof
-            .verify_with_provider(
-                &HashProvider::default(),
-                &encoder_secret(),
-                &commitment,
-                transcript.sent(),
-                transcript.received(),
-            )
-            .unwrap();
-
-        let mut expected_auth_sent = RangeSet::default();
-        expected_auth_sent.union_mut(&idx_0.1);
-        expected_auth_sent.union_mut(&idx_1.1);
-
-        let mut expected_auth_recv = RangeSet::default();
-        expected_auth_recv.union_mut(&idx_2.1);
-        expected_auth_recv.union_mut(&idx_3.1);
-
-        assert_eq!(auth_sent, expected_auth_sent);
-        assert_eq!(auth_recv, expected_auth_recv);
-    }
-
-    #[test]
-    fn test_encoding_tree_proof_missing_leaf() {
-        let transcript = Transcript::new(POST_JSON, OK_JSON);
-
-        let idx_0 = (Direction::Sent, RangeSet::from(0..POST_JSON.len()));
-        let idx_1 = (Direction::Received, RangeSet::from(0..4));
-        let idx_2 = (Direction::Received, RangeSet::from(4..OK_JSON.len()));
-
-        let tree = new_tree(&transcript, [&idx_0, &idx_1].into_iter()).unwrap();
-
-        let result = tree
-            .proof([&idx_0, &idx_1, &idx_2].into_iter())
-            .unwrap_err();
-        assert!(matches!(result, EncodingTreeError::MissingLeaf { .. }));
-    }
-
-    #[test]
-    fn test_encoding_tree_out_of_bounds() {
-        let transcript = Transcript::new(POST_JSON, OK_JSON);
-
-        let idx_0 = (Direction::Sent, RangeSet::from(0..POST_JSON.len() + 1));
-        let idx_1 = (Direction::Received, RangeSet::from(0..OK_JSON.len() + 1));
-
-        let result = new_tree(&transcript, [&idx_0].into_iter()).unwrap_err();
-        assert!(matches!(result, EncodingTreeError::MissingEncoding { .. }));
-
-        let result = new_tree(&transcript, [&idx_1].into_iter()).unwrap_err();
-        assert!(matches!(result, EncodingTreeError::MissingEncoding { .. }));
-    }
-
-    #[test]
-    fn test_encoding_tree_missing_encoding() {
-        let provider = encoding_provider(&[], &[]);
-
-        let result = EncodingTree::new(
-            &Blake3::default(),
-            [(Direction::Sent, RangeSet::from(0..8))].iter(),
-            &provider,
-        )
-        .unwrap_err();
-        assert!(matches!(result, EncodingTreeError::MissingEncoding { .. }));
-    }
-}
--- a/crates/core/src/transcript/proof.rs
+++ b/crates/core/src/transcript/proof.rs
@@ -14,7 +14,6 @@ use crate::{
    hash::{HashAlgId, HashProvider},
    transcript::{
        commit::{TranscriptCommitment, TranscriptCommitmentKind},
-        encoding::{EncoderSecret, EncodingProof, EncodingProofError, EncodingTree},
        hash::{hash_plaintext, PlaintextHash, PlaintextHashSecret},
        Direction, PartialTranscript, RangeSet, Transcript, TranscriptSecret,
    },
@@ -32,14 +31,12 @@ const DEFAULT_COMMITMENT_KINDS: &[TranscriptCommitmentKind] = &[
    TranscriptCommitmentKind::Hash {
        alg: HashAlgId::KECCAK256,
    },
-    TranscriptCommitmentKind::Encoding,
 ];

 /// Proof of the contents of a transcript.
 #[derive(Clone, Serialize, Deserialize)]
 pub struct TranscriptProof {
    transcript: PartialTranscript,
-    encoding_proof: Option<EncodingProof>,
    hash_secrets: Vec<PlaintextHashSecret>,
 }

@@ -53,27 +50,18 @@ impl TranscriptProof {
    /// # Arguments
    ///
    /// * `provider` - The hash provider to use for verification.
-    /// * `attestation_body` - The attestation body to verify against.
+    /// * `length` - The transcript length.
+    /// * `commitments` - The commitments to verify against.
    pub fn verify_with_provider<'a>(
        self,
        provider: &HashProvider,
        length: &TranscriptLength,
-        encoder_secret: Option<&EncoderSecret>,
        commitments: impl IntoIterator<Item = &'a TranscriptCommitment>,
    ) -> Result<PartialTranscript, TranscriptProofError> {
-        let mut encoding_commitment = None;
        let mut hash_commitments = HashSet::new();
        // Index commitments.
        for commitment in commitments {
            match commitment {
-                TranscriptCommitment::Encoding(commitment) => {
-                    if encoding_commitment.replace(commitment).is_some() {
-                        return Err(TranscriptProofError::new(
-                            ErrorKind::Encoding,
-                            "multiple encoding commitments are present.",
-                        ));
-                    }
-                }
                TranscriptCommitment::Hash(plaintext_hash) => {
                    hash_commitments.insert(plaintext_hash);
                }
@@ -92,34 +80,6 @@ impl TranscriptProof {
        let mut total_auth_sent = RangeSet::default();
        let mut total_auth_recv = RangeSet::default();

-        // Verify encoding proof.
-        if let Some(proof) = self.encoding_proof {
-            let secret = encoder_secret.ok_or_else(|| {
-                TranscriptProofError::new(
-                    ErrorKind::Encoding,
-                    "contains an encoding proof but missing encoder secret",
-                )
-            })?;
-
-            let commitment = encoding_commitment.ok_or_else(|| {
-                TranscriptProofError::new(
-                    ErrorKind::Encoding,
-                    "contains an encoding proof but missing encoding commitment",
-                )
-            })?;
-
-            let (auth_sent, auth_recv) = proof.verify_with_provider(
-                provider,
-                secret,
-                commitment,
-                self.transcript.sent_unsafe(),
-                self.transcript.received_unsafe(),
-            )?;
-
-            total_auth_sent.union_mut(&auth_sent);
-            total_auth_recv.union_mut(&auth_recv);
-        }
-
        let mut buffer = Vec::new();
        for PlaintextHashSecret {
            direction,
@@ -203,7 +163,6 @@ impl TranscriptProofError {

 #[derive(Debug)]
 enum ErrorKind {
-    Encoding,
    Hash,
    Proof,
 }
@@ -213,7 +172,6 @@ impl fmt::Display for TranscriptProofError {
        f.write_str("transcript proof error: ")?;

        match self.kind {
-            ErrorKind::Encoding => f.write_str("encoding error")?,
            ErrorKind::Hash => f.write_str("hash error")?,
            ErrorKind::Proof => f.write_str("proof error")?,
        }
@@ -226,12 +184,6 @@ impl fmt::Display for TranscriptProofError {
    }
 }

-impl From<EncodingProofError> for TranscriptProofError {
-    fn from(e: EncodingProofError) -> Self {
-        TranscriptProofError::new(ErrorKind::Encoding, e)
-    }
-}
-
 /// Union of ranges to reveal.
 #[derive(Clone, Debug, PartialEq)]
 struct QueryIdx {
@@ -276,7 +228,6 @@ pub struct TranscriptProofBuilder<'a> {
    /// Commitment kinds in order of preference for building transcript proofs.
    commitment_kinds: Vec<TranscriptCommitmentKind>,
    transcript: &'a Transcript,
-    encoding_tree: Option<&'a EncodingTree>,
    hash_secrets: Vec<&'a PlaintextHashSecret>,
    committed_sent: RangeSet<usize>,
    committed_recv: RangeSet<usize>,
@@ -292,15 +243,9 @@ impl<'a> TranscriptProofBuilder<'a> {
        let mut committed_sent = RangeSet::default();
        let mut committed_recv = RangeSet::default();

-        let mut encoding_tree = None;
        let mut hash_secrets = Vec::new();
        for secret in secrets {
            match secret {
-                TranscriptSecret::Encoding(tree) => {
-                    committed_sent.union_mut(tree.idx(Direction::Sent));
-                    committed_recv.union_mut(tree.idx(Direction::Received));
-                    encoding_tree = Some(tree);
-                }
                TranscriptSecret::Hash(hash) => {
                    match hash.direction {
                        Direction::Sent => committed_sent.union_mut(&hash.idx),
@@ -314,7 +259,6 @@ impl<'a> TranscriptProofBuilder<'a> {
        Self {
            commitment_kinds: DEFAULT_COMMITMENT_KINDS.to_vec(),
            transcript,
-            encoding_tree,
            hash_secrets,
            committed_sent,
            committed_recv,
@@ -412,7 +356,6 @@ impl<'a> TranscriptProofBuilder<'a> {
            transcript: self
                .transcript
                .to_partial(self.query_idx.sent.clone(), self.query_idx.recv.clone()),
-            encoding_proof: None,
            hash_secrets: Vec::new(),
        };
        let mut uncovered_query_idx = self.query_idx.clone();
@@ -424,46 +367,6 @@ impl<'a> TranscriptProofBuilder<'a> {
            // self.commitment_kinds.
            if let Some(kind) = commitment_kinds_iter.next() {
                match kind {
-                    TranscriptCommitmentKind::Encoding => {
-                        let Some(encoding_tree) = self.encoding_tree else {
-                            // Proceeds to the next preferred commitment kind if encoding tree is
-                            // not available.
-                            continue;
-                        };
-
-                        let (sent_dir_idxs, sent_uncovered) = uncovered_query_idx.sent.cover_by(
-                            encoding_tree
-                                .transcript_indices()
-                                .filter(|(dir, _)| *dir == Direction::Sent),
-                            |(_, idx)| idx,
-                        );
-                        // Uncovered ranges will be checked with ranges of the next
-                        // preferred commitment kind.
-                        uncovered_query_idx.sent = sent_uncovered;
-
-                        let (recv_dir_idxs, recv_uncovered) = uncovered_query_idx.recv.cover_by(
-                            encoding_tree
-                                .transcript_indices()
-                                .filter(|(dir, _)| *dir == Direction::Received),
-                            |(_, idx)| idx,
-                        );
-                        uncovered_query_idx.recv = recv_uncovered;
-
-                        let dir_idxs = sent_dir_idxs
-                            .into_iter()
-                            .chain(recv_dir_idxs)
-                            .collect::<Vec<_>>();
-
-                        // Skip proof generation if there are no committed ranges that can cover the
-                        // query ranges.
-                        if !dir_idxs.is_empty() {
-                            transcript_proof.encoding_proof = Some(
-                                encoding_tree
-                                    .proof(dir_idxs.into_iter())
-                                    .expect("subsequences were checked to be in tree"),
-                            );
-                        }
-                    }
                    TranscriptCommitmentKind::Hash { alg } => {
                        let (sent_hashes, sent_uncovered) = uncovered_query_idx.sent.cover_by(
                            self.hash_secrets.iter().filter(|hash| {
@@ -590,46 +493,10 @@ mod tests {
    use rstest::rstest;
    use tlsn_data_fixtures::http::{request::GET_WITH_HEADER, response::OK_JSON};

-    use crate::{
-        fixtures::{encoder_secret, encoding_provider},
-        hash::{Blake3, Blinder, HashAlgId},
-        transcript::TranscriptCommitConfigBuilder,
-    };
+    use crate::hash::{Blinder, HashAlgId};

    use super::*;

-    #[rstest]
-    fn test_verify_missing_encoding_commitment_root() {
-        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);
-        let idxs = vec![(Direction::Received, RangeSet::from(0..transcript.len().1))];
-        let encoding_tree = EncodingTree::new(
-            &Blake3::default(),
-            &idxs,
-            &encoding_provider(transcript.sent(), transcript.received()),
-        )
-        .unwrap();
-
-        let secrets = vec![TranscriptSecret::Encoding(encoding_tree)];
-        let mut builder = TranscriptProofBuilder::new(&transcript, &secrets);
-
-        builder.reveal_recv(&(0..transcript.len().1)).unwrap();
-
-        let transcript_proof = builder.build().unwrap();
-
-        let provider = HashProvider::default();
-        let err = transcript_proof
-            .verify_with_provider(
-                &provider,
-                &transcript.length(),
-                Some(&encoder_secret()),
-                &[],
-            )
-            .err()
-            .unwrap();
-
-        assert!(matches!(err.kind, ErrorKind::Encoding));
-    }
-
    #[rstest]
    fn test_reveal_range_out_of_bounds() {
        let transcript = Transcript::new(
@@ -649,7 +516,7 @@ mod tests {
    }

    #[rstest]
-    fn test_reveal_missing_encoding_tree() {
+    fn test_reveal_missing_commitment() {
        let transcript = Transcript::new(
            [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11],
            [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11],
@@ -698,7 +565,6 @@ mod tests {
            .verify_with_provider(
                &provider,
                &transcript.length(),
-                None,
                &[TranscriptCommitment::Hash(commitment)],
            )
            .unwrap();
@@ -748,7 +614,6 @@ mod tests {
            .verify_with_provider(
                &provider,
                &transcript.length(),
-                None,
                &[TranscriptCommitment::Hash(commitment)],
            )
            .unwrap_err();
@@ -764,24 +629,19 @@ mod tests {
            TranscriptCommitmentKind::Hash {
                alg: HashAlgId::SHA256,
            },
-            TranscriptCommitmentKind::Encoding,
            TranscriptCommitmentKind::Hash {
                alg: HashAlgId::SHA256,
            },
            TranscriptCommitmentKind::Hash {
                alg: HashAlgId::SHA256,
            },
-            TranscriptCommitmentKind::Encoding,
        ]);

        assert_eq!(
            builder.commitment_kinds,
-            vec![
-                TranscriptCommitmentKind::Hash {
-                    alg: HashAlgId::SHA256
-                },
-                TranscriptCommitmentKind::Encoding
-            ]
+            vec![TranscriptCommitmentKind::Hash {
+                alg: HashAlgId::SHA256
+            },]
        );
    }

@@ -791,7 +651,7 @@ mod tests {
        RangeSet::from([0..10, 12..30]),
        true,
    )]
-    #[case::reveal_all_rangesets_with_superset_ranges(
+    #[case::reveal_all_rangesets_with_single_superset_range(
        vec![RangeSet::from([0..1]), RangeSet::from([1..2, 8..9]), RangeSet::from([2..4, 6..8]), RangeSet::from([2..3, 6..7]), RangeSet::from([9..12])],
        RangeSet::from([0..4, 6..9]),
        true,
@@ -822,29 +682,30 @@ mod tests {
        false,
    )]
    #[allow(clippy::single_range_in_vec_init)]
-    fn test_reveal_mutliple_rangesets_with_one_rangeset(
+    fn test_reveal_multiple_rangesets_with_one_rangeset(
        #[case] commit_recv_rangesets: Vec<RangeSet<usize>>,
        #[case] reveal_recv_rangeset: RangeSet<usize>,
        #[case] success: bool,
    ) {
+        use rand::{Rng, SeedableRng};
+
+        let mut rng = rand::rngs::StdRng::seed_from_u64(0);
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);

-        // Encoding commitment kind
-        let mut transcript_commitment_builder = TranscriptCommitConfigBuilder::new(&transcript);
+        // Create hash commitments for each rangeset
+        let mut secrets = Vec::new();
        for rangeset in commit_recv_rangesets.iter() {
-            transcript_commitment_builder.commit_recv(rangeset).unwrap();
+            let blinder: crate::hash::Blinder = rng.random();
+
+            let secret = PlaintextHashSecret {
+                direction: Direction::Received,
+                idx: rangeset.clone(),
+                alg: HashAlgId::BLAKE3,
+                blinder,
+            };
+            secrets.push(TranscriptSecret::Hash(secret));
        }

-        let transcripts_commitment_config = transcript_commitment_builder.build().unwrap();
-
-        let encoding_tree = EncodingTree::new(
-            &Blake3::default(),
-            transcripts_commitment_config.iter_encoding(),
-            &encoding_provider(GET_WITH_HEADER, OK_JSON),
-        )
-        .unwrap();
-
-        let secrets = vec![TranscriptSecret::Encoding(encoding_tree)];
        let mut builder = TranscriptProofBuilder::new(&transcript, &secrets);

        if success {
@@ -897,27 +758,34 @@ mod tests {
        #[case] uncovered_sent_rangeset: RangeSet<usize>,
        #[case] uncovered_recv_rangeset: RangeSet<usize>,
    ) {
+        use rand::{Rng, SeedableRng};
+
+        let mut rng = rand::rngs::StdRng::seed_from_u64(0);
        let transcript = Transcript::new(GET_WITH_HEADER, OK_JSON);

-        // Encoding commitment kind
-        let mut transcript_commitment_builder = TranscriptCommitConfigBuilder::new(&transcript);
+        // Create hash commitments for each rangeset
+        let mut secrets = Vec::new();
        for rangeset in commit_sent_rangesets.iter() {
-            transcript_commitment_builder.commit_sent(rangeset).unwrap();
+            let blinder: crate::hash::Blinder = rng.random();
+            let secret = PlaintextHashSecret {
+                direction: Direction::Sent,
+                idx: rangeset.clone(),
+                alg: HashAlgId::BLAKE3,
+                blinder,
+            };
+            secrets.push(TranscriptSecret::Hash(secret));
        }
        for rangeset in commit_recv_rangesets.iter() {
-            transcript_commitment_builder.commit_recv(rangeset).unwrap();
+            let blinder: crate::hash::Blinder = rng.random();
+            let secret = PlaintextHashSecret {
+                direction: Direction::Received,
+                idx: rangeset.clone(),
+                alg: HashAlgId::BLAKE3,
+                blinder,
+            };
+            secrets.push(TranscriptSecret::Hash(secret));
        }

-        let transcripts_commitment_config = transcript_commitment_builder.build().unwrap();
-
-        let encoding_tree = EncodingTree::new(
-            &Blake3::default(),
-            transcripts_commitment_config.iter_encoding(),
-            &encoding_provider(GET_WITH_HEADER, OK_JSON),
-        )
-        .unwrap();
-
-        let secrets = vec![TranscriptSecret::Encoding(encoding_tree)];
        let mut builder = TranscriptProofBuilder::new(&transcript, &secrets);
        builder.reveal_sent(&reveal_sent_rangeset).unwrap();
        builder.reveal_recv(&reveal_recv_rangeset).unwrap();
--- a/crates/examples/attestation/prove.rs
+++ b/crates/examples/attestation/prove.rs
@@ -332,7 +332,6 @@ async fn notary<S: AsyncWrite + AsyncRead + Send + Sync + Unpin + 'static>(
    let (
        VerifierOutput {
            transcript_commitments,
-            encoder_secret,
            ..
        },
        verifier,
@@ -393,10 +392,6 @@ async fn notary<S: AsyncWrite + AsyncRead + Send + Sync + Unpin + 'static>(
        .server_ephemeral_key(tls_transcript.server_ephemeral_key().clone())
        .transcript_commitments(transcript_commitments);

-    if let Some(encoder_secret) = encoder_secret {
-        builder.encoder_secret(encoder_secret);
-    }
-
    let attestation = builder.build(&provider)?;

    // Send attestation to prover.
--- a/crates/harness/bench.toml
+++ b/crates/harness/bench.toml
@@ -1,51 +1,59 @@
-#### Latency ####
+#### Default Representative Benchmarks ####
+#
+# This benchmark measures TLSNotary performance on three representative network scenarios.
+# Each scenario is run multiple times to produce statistical metrics (median, std dev, etc.)
+# rather than plots. Use this for quick performance checks and CI regression testing.
+#
+# Payload sizes:
+#   - upload-size: 1KB (typical HTTP request)
+#   - download-size: 2KB (typical HTTP response/API data)
+#
+# Network scenarios are chosen to represent real-world user conditions where
+# TLSNotary is primarily bottlenecked by upload bandwidth.
+
+#### Cable/DSL Home Internet ####
+# Most common residential internet connection
+# - Asymmetric: high download, limited upload (typical bottleneck)
+# - Upload bandwidth: 20 Mbps (realistic cable/DSL upload speed)
+# - Latency: 20ms (typical ISP latency)

 [[group]]
-name = "latency"
-bandwidth = 1000
+name = "cable"
+bandwidth = 20
+protocol_latency = 20
+upload-size = 1024
+download-size = 2048

 [[bench]]
-group = "latency"
-protocol_latency = 10
+group = "cable"

-[[bench]]
-group = "latency"
-protocol_latency = 25
-
-[[bench]]
-group = "latency"
-protocol_latency = 50
-
-[[bench]]
-group = "latency"
-protocol_latency = 100
-
-[[bench]]
-group = "latency"
-protocol_latency = 200
-
-#### Bandwidth ####
+#### Mobile 5G ####
+# Modern mobile connection with good coverage
+# - Upload bandwidth: 30 Mbps (typical 5G upload in good conditions)
+# - Latency: 30ms (higher than wired due to mobile tower hops)

 [[group]]
-name = "bandwidth"
-protocol_latency = 25
+name = "mobile_5g"
+bandwidth = 30
+protocol_latency = 30
+upload-size = 1024
+download-size = 2048

 [[bench]]
-group = "bandwidth"
-bandwidth = 10
+group = "mobile_5g"

-[[bench]]
-group = "bandwidth"
-bandwidth = 50
+#### Fiber Home Internet ####
+# High-end residential connection (best case scenario)
+# - Symmetric: equal upload/download bandwidth
+# - Upload bandwidth: 100 Mbps (typical fiber upload)
+# - Latency: 15ms (lower latency than cable)

-[[bench]]
-group = "bandwidth"
+[[group]]
+name = "fiber"
 bandwidth = 100
+protocol_latency = 15
+upload-size = 1024
+download-size = 2048

 [[bench]]
-group = "bandwidth"
-bandwidth = 250
-
-[[bench]]
-group = "bandwidth"
-bandwidth = 1000
+group = "fiber"
--- a/crates/harness/bench_bandwidth_sweep.toml
+++ b/crates/harness/bench_bandwidth_sweep.toml
@@ -0,0 +1,52 @@
+#### Bandwidth Sweep Benchmark ####
+#
+# Measures how network bandwidth affects TLSNotary runtime.
+# Keeps latency and payload sizes fixed while varying upload bandwidth.
+#
+# Fixed parameters:
+#   - Latency: 25ms (typical internet latency)
+#   - Upload: 1KB (typical request)
+#   - Download: 2KB (typical response)
+#
+# Variable: Bandwidth from 5 Mbps to 1000 Mbps
+#
+# Use this to plot "Bandwidth vs Runtime" and understand bandwidth sensitivity.
+# Focus on upload bandwidth as TLSNotary is primarily upload-bottlenecked
+
+[[group]]
+name = "bandwidth_sweep"
+protocol_latency = 25
+upload-size = 1024
+download-size = 2048
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 5
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 10
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 20
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 50
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 100
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 250
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 500
+
+[[bench]]
+group = "bandwidth_sweep"
+bandwidth = 1000
--- a/crates/harness/bench_download_sweep.toml
+++ b/crates/harness/bench_download_sweep.toml
@@ -0,0 +1,53 @@
+#### Download Size Sweep Benchmark ####
+#
+# Measures how download payload size affects TLSNotary runtime.
+# Keeps network conditions fixed while varying the response size.
+#
+# Fixed parameters:
+#   - Bandwidth: 100 Mbps (typical good connection)
+#   - Latency: 25ms (typical internet latency)
+#   - Upload: 1KB (typical request size)
+#
+# Variable: Download size from 1KB to 100KB
+#
+# Use this to plot "Download Size vs Runtime" and understand how much data
+# TLSNotary can efficiently notarize. Useful for determining optimal
+# chunking strategies for large responses.
+
+[[group]]
+name = "download_sweep"
+bandwidth = 100
+protocol_latency = 25
+upload-size = 1024
+
+[[bench]]
+group = "download_sweep"
+download-size = 1024
+
+[[bench]]
+group = "download_sweep"
+download-size = 2048
+
+[[bench]]
+group = "download_sweep"
+download-size = 5120
+
+[[bench]]
+group = "download_sweep"
+download-size = 10240
+
+[[bench]]
+group = "download_sweep"
+download-size = 20480
+
+[[bench]]
+group = "download_sweep"
+download-size = 30720
+
+[[bench]]
+group = "download_sweep"
+download-size = 40960
+
+[[bench]]
+group = "download_sweep"
+download-size = 51200
--- a/crates/harness/bench_latency_sweep.toml
+++ b/crates/harness/bench_latency_sweep.toml
@@ -0,0 +1,47 @@
+#### Latency Sweep Benchmark ####
+#
+# Measures how network latency affects TLSNotary runtime.
+# Keeps bandwidth and payload sizes fixed while varying protocol latency.
+#
+# Fixed parameters:
+#   - Bandwidth: 100 Mbps (typical good connection)
+#   - Upload: 1KB (typical request)
+#   - Download: 2KB (typical response)
+#
+# Variable: Protocol latency from 10ms to 200ms
+#
+# Use this to plot "Latency vs Runtime" and understand latency sensitivity.
+
+[[group]]
+name = "latency_sweep"
+bandwidth = 100
+upload-size = 1024
+download-size = 2048
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 10
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 25
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 50
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 75
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 100
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 150
+
+[[bench]]
+group = "latency_sweep"
+protocol_latency = 200
--- a/crates/harness/core/src/bench.rs
+++ b/crates/harness/core/src/bench.rs
@@ -9,6 +9,7 @@ pub const DEFAULT_UPLOAD_SIZE: usize = 1024;
 pub const DEFAULT_DOWNLOAD_SIZE: usize = 4096;
 pub const DEFAULT_DEFER_DECRYPTION: bool = true;
 pub const DEFAULT_MEMORY_PROFILE: bool = false;
+pub const DEFAULT_REVEAL_ALL: bool = false;

 pub const WARM_UP_BENCH: Bench = Bench {
    group: None,
@@ -20,6 +21,7 @@ pub const WARM_UP_BENCH: Bench = Bench {
    download_size: 4096,
    defer_decryption: true,
    memory_profile: false,
+    reveal_all: true,
 };

 #[derive(Deserialize)]
@@ -79,6 +81,8 @@ pub struct BenchGroupItem {
    pub defer_decryption: Option<bool>,
    #[serde(rename = "memory-profile")]
    pub memory_profile: Option<bool>,
+    #[serde(rename = "reveal-all")]
+    pub reveal_all: Option<bool>,
 }

 #[derive(Debug, Clone, Serialize, Deserialize)]
@@ -97,6 +101,8 @@ pub struct BenchItem {
    pub defer_decryption: Option<bool>,
    #[serde(rename = "memory-profile")]
    pub memory_profile: Option<bool>,
+    #[serde(rename = "reveal-all")]
+    pub reveal_all: Option<bool>,
 }

 impl BenchItem {
@@ -132,6 +138,10 @@ impl BenchItem {
        if self.memory_profile.is_none() {
            self.memory_profile = group.memory_profile;
        }
+
+        if self.reveal_all.is_none() {
+            self.reveal_all = group.reveal_all;
+        }
    }

    pub fn into_bench(&self) -> Bench {
@@ -145,6 +155,7 @@ impl BenchItem {
            download_size: self.download_size.unwrap_or(DEFAULT_DOWNLOAD_SIZE),
            defer_decryption: self.defer_decryption.unwrap_or(DEFAULT_DEFER_DECRYPTION),
            memory_profile: self.memory_profile.unwrap_or(DEFAULT_MEMORY_PROFILE),
+            reveal_all: self.reveal_all.unwrap_or(DEFAULT_REVEAL_ALL),
        }
    }
 }
@@ -164,6 +175,8 @@ pub struct Bench {
    pub defer_decryption: bool,
    #[serde(rename = "memory-profile")]
    pub memory_profile: bool,
+    #[serde(rename = "reveal-all")]
+    pub reveal_all: bool,
 }

 #[derive(Debug, Clone, Serialize, Deserialize)]
--- a/crates/harness/core/src/rpc.rs
+++ b/crates/harness/core/src/rpc.rs
@@ -22,7 +22,10 @@ pub enum CmdOutput {
    GetTests(Vec<String>),
    Test(TestOutput),
    Bench(BenchOutput),
-    Fail { reason: Option<String> },
+    #[cfg(target_arch = "wasm32")]
+    Fail {
+        reason: Option<String>,
+    },
 }

 #[derive(Debug, Clone, Serialize, Deserialize)]
--- a/crates/harness/executor/src/bench/prover.rs
+++ b/crates/harness/executor/src/bench/prover.rs
@@ -98,14 +98,27 @@ pub async fn bench_prover(provider: &IoProvider, config: &Bench) -> Result<Prove

    let mut builder = ProveConfig::builder(prover.transcript());

+    // When reveal_all is false (the default), we exclude 1 byte to avoid the
+    // reveal-all optimization and benchmark the realistic ZK authentication path.
+    let reveal_sent_range = if config.reveal_all {
+        0..sent_len
+    } else {
+        0..sent_len.saturating_sub(1)
+    };
+    let reveal_recv_range = if config.reveal_all {
+        0..recv_len
+    } else {
+        0..recv_len.saturating_sub(1)
+    };
+
    builder
        .server_identity()
-        .reveal_sent(&(0..sent_len))?
-        .reveal_recv(&(0..recv_len))?;
+        .reveal_sent(&reveal_sent_range)?
+        .reveal_recv(&reveal_recv_range)?;

-    let config = builder.build()?;
+    let prove_config = builder.build()?;

-    prover.prove(&config).await?;
+    prover.prove(&prove_config).await?;
    prover.close().await?;

    let time_total = time_start.elapsed().as_millis();
--- a/crates/harness/runner/Cargo.toml
+++ b/crates/harness/runner/Cargo.toml
@@ -22,6 +22,7 @@ clap = { workspace = true, features = ["derive", "env"] }
 csv = { version = "1.3" }
 duct = { version = "1" }
 futures = { workspace = true }
+indicatif = { version = "0.17" }
 ipnet = { workspace = true }
 serio = { workspace = true }
 serde_json = { workspace = true }
--- a/crates/harness/runner/src/cli.rs
+++ b/crates/harness/runner/src/cli.rs
@@ -16,6 +16,10 @@ pub struct Cli {
    /// Subnet to assign harness network interfaces.
    #[arg(long, default_value = "10.250.0.0/24", env = "SUBNET")]
    pub subnet: Ipv4Net,
+    /// Run browser in headed mode (visible window) for debugging.
+    /// Works with both X11 and Wayland.
+    #[arg(long)]
+    pub headed: bool,
 }

 #[derive(Subcommand)]
@@ -31,10 +35,13 @@ pub enum Command {
    },
    /// runs benchmarks.
    Bench {
-        /// Configuration path.
+        /// Configuration path. Defaults to bench.toml which contains
+        /// representative scenarios (cable, 5G, fiber) for quick performance
+        /// checks. Use bench_*_sweep.toml files for parametric
+        /// analysis.
        #[arg(short, long, default_value = "bench.toml")]
        config: PathBuf,
-        /// Output file path.
+        /// Output CSV file path for detailed metrics and post-processing.
        #[arg(short, long, default_value = "metrics.csv")]
        output: PathBuf,
        /// Number of samples to measure per benchmark. This is overridden by
--- a/crates/harness/runner/src/executor.rs
+++ b/crates/harness/runner/src/executor.rs
@@ -28,6 +28,9 @@ pub struct Executor {
    ns: Namespace,
    config: ExecutorConfig,
    target: Target,
+    /// Display environment variables for headed mode (X11/Wayland).
+    /// Empty means headless mode.
+    display_env: Vec<String>,
    state: State,
 }

@@ -49,11 +52,17 @@ impl State {
 }

 impl Executor {
-    pub fn new(ns: Namespace, config: ExecutorConfig, target: Target) -> Self {
+    pub fn new(
+        ns: Namespace,
+        config: ExecutorConfig,
+        target: Target,
+        display_env: Vec<String>,
+    ) -> Self {
        Self {
            ns,
            config,
            target,
+            display_env,
            state: State::Init,
        }
    }
@@ -120,23 +129,49 @@ impl Executor {
                let tmp = duct::cmd!("mktemp", "-d").read()?;
                let tmp = tmp.trim();

-                let process = duct::cmd!(
-                    "sudo",
-                    "ip",
-                    "netns",
-                    "exec",
-                    self.ns.name(),
-                    chrome_path,
-                    format!("--remote-debugging-port={PORT_BROWSER}"),
-                    "--headless",
-                    "--disable-dev-shm-usage",
-                    "--disable-gpu",
-                    "--disable-cache",
-                    "--disable-application-cache",
-                    "--no-sandbox",
+                let headed = !self.display_env.is_empty();
+
+                // Build command args based on headed/headless mode
+                let mut args: Vec<String> = vec![
+                    "ip".into(),
+                    "netns".into(),
+                    "exec".into(),
+                    self.ns.name().into(),
+                ];
+
+                if headed {
+                    // For headed mode: drop back to the current user and pass display env vars
+                    // This allows the browser to connect to X11/Wayland while in the namespace
+                    let user =
+                        std::env::var("USER").context("USER environment variable not set")?;
+                    args.extend(["sudo".into(), "-E".into(), "-u".into(), user, "env".into()]);
+                    args.extend(self.display_env.clone());
+                }
+
+                args.push(chrome_path.to_string_lossy().into());
+                args.push(format!("--remote-debugging-port={PORT_BROWSER}"));
+
+                if headed {
+                    // Headed mode: no headless, add flags to suppress first-run dialogs
+                    args.extend(["--no-first-run".into(), "--no-default-browser-check".into()]);
+                } else {
+                    // Headless mode: original flags
+                    args.extend([
+                        "--headless".into(),
+                        "--disable-dev-shm-usage".into(),
+                        "--disable-gpu".into(),
+                        "--disable-cache".into(),
+                        "--disable-application-cache".into(),
+                    ]);
+                }
+
+                args.extend([
+                    "--no-sandbox".into(),
                    format!("--user-data-dir={tmp}"),
-                    format!("--allowed-ips=10.250.0.1"),
-                );
+                    "--allowed-ips=10.250.0.1".into(),
+                ]);
+
+                let process = duct::cmd("sudo", &args);

                let process = if !cfg!(feature = "debug") {
                    process.stderr_capture().stdout_capture().start()?
--- a/crates/harness/runner/src/lib.rs
+++ b/crates/harness/runner/src/lib.rs
@@ -9,7 +9,7 @@ mod ws_proxy;
 #[cfg(feature = "debug")]
 mod debug_prelude;

-use std::time::Duration;
+use std::{collections::HashMap, time::Duration};

 use anyhow::Result;
 use clap::Parser;
@@ -22,6 +22,7 @@ use harness_core::{
    rpc::{BenchCmd, TestCmd},
    test::TestStatus,
 };
+use indicatif::{ProgressBar, ProgressStyle};

 use cli::{Cli, Command};
 use executor::Executor;
@@ -32,6 +33,60 @@ use crate::debug_prelude::*;

 use crate::{cli::Route, network::Network, wasm_server::WasmServer, ws_proxy::WsProxy};

+/// Statistics for a benchmark configuration
+#[derive(Debug, Clone)]
+struct BenchStats {
+    group: Option<String>,
+    bandwidth: usize,
+    latency: usize,
+    upload_size: usize,
+    download_size: usize,
+    times: Vec<u64>,
+}
+
+impl BenchStats {
+    fn median(&self) -> f64 {
+        let mut sorted = self.times.clone();
+        sorted.sort();
+        let len = sorted.len();
+        if len == 0 {
+            return 0.0;
+        }
+        if len.is_multiple_of(2) {
+            (sorted[len / 2 - 1] + sorted[len / 2]) as f64 / 2.0
+        } else {
+            sorted[len / 2] as f64
+        }
+    }
+}
+
+/// Print summary table of benchmark results
+fn print_bench_summary(stats: &[BenchStats]) {
+    if stats.is_empty() {
+        println!("\nNo benchmark results to display (only warmup was run).");
+        return;
+    }
+
+    println!("\n{}", "=".repeat(80));
+    println!("TLSNotary Benchmark Results");
+    println!("{}", "=".repeat(80));
+    println!();
+
+    for stat in stats {
+        let group_name = stat.group.as_deref().unwrap_or("unnamed");
+        println!(
+            "{} ({} Mbps, {}ms latency, {}KB↑ {}KB↓):",
+            group_name,
+            stat.bandwidth,
+            stat.latency,
+            stat.upload_size / 1024,
+            stat.download_size / 1024
+        );
+        println!("  Median:  {:.2}s", stat.median() / 1000.0);
+        println!();
+    }
+}
+
 #[derive(Debug, Clone, Copy, PartialEq, Eq, clap::ValueEnum, Default)]
 pub enum Target {
    #[default]
@@ -50,14 +105,46 @@ struct Runner {
    started: bool,
 }

+/// Collects display-related environment variables for headed browser mode.
+/// Works with both X11 and Wayland by collecting whichever vars are present.
+fn collect_display_env_vars() -> Vec<String> {
+    const DISPLAY_VARS: &[&str] = &[
+        "DISPLAY",         // X11
+        "XAUTHORITY",      // X11 auth
+        "WAYLAND_DISPLAY", // Wayland
+        "XDG_RUNTIME_DIR", // Wayland runtime dir
+    ];
+
+    DISPLAY_VARS
+        .iter()
+        .filter_map(|&var| {
+            std::env::var(var)
+                .ok()
+                .map(|val| format!("{}={}", var, val))
+        })
+        .collect()
+}
+
 impl Runner {
    fn new(cli: &Cli) -> Result<Self> {
-        let Cli { target, subnet, .. } = cli;
+        let Cli {
+            target,
+            subnet,
+            headed,
+            ..
+        } = cli;
        let current_path = std::env::current_exe().unwrap();
        let fixture_path = current_path.parent().unwrap().join("server-fixture");
        let network_config = NetworkConfig::new(*subnet);
        let network = Network::new(network_config.clone())?;

+        // Collect display env vars once if headed mode is enabled
+        let display_env = if *headed {
+            collect_display_env_vars()
+        } else {
+            Vec::new()
+        };
+
        let server_fixture =
            ServerFixture::new(fixture_path, network.ns_app().clone(), network_config.app);
        let wasm_server = WasmServer::new(
@@ -75,6 +162,7 @@ impl Runner {
                .network_config(network_config.clone())
                .build(),
            *target,
+            display_env.clone(),
        );
        let exec_v = Executor::new(
            network.ns_1().clone(),
@@ -84,6 +172,7 @@ impl Runner {
                .network_config(network_config.clone())
                .build(),
            Target::Native,
+            Vec::new(), // Verifier doesn't need display env
        );

        Ok(Self {
@@ -118,6 +207,12 @@ pub async fn main() -> Result<()> {
    tracing_subscriber::fmt::init();

    let cli = Cli::parse();
+
+    // Validate --headed requires --target browser
+    if cli.headed && cli.target != Target::Browser {
+        anyhow::bail!("--headed can only be used with --target browser");
+    }
+
    let mut runner = Runner::new(&cli)?;

    let mut exit_code = 0;
@@ -206,6 +301,12 @@ pub async fn main() -> Result<()> {
            samples_override,
            skip_warmup,
        } => {
+            // Print configuration info
+            println!("TLSNotary Benchmark Harness");
+            println!("Running benchmarks from: {}", config.display());
+            println!("Output will be written to: {}", output.display());
+            println!();
+
            let items: BenchItems = toml::from_str(&std::fs::read_to_string(config)?)?;
            let output_file = std::fs::File::create(output)?;
            let mut writer = WriterBuilder::new().from_writer(output_file);
@@ -220,7 +321,34 @@ pub async fn main() -> Result<()> {
            runner.exec_p.start().await?;
            runner.exec_v.start().await?;

-            for config in benches {
+            // Create progress bar
+            let pb = ProgressBar::new(benches.len() as u64);
+            pb.set_style(
+                ProgressStyle::default_bar()
+                    .template("[{elapsed_precise}] {bar:40.cyan/blue} {pos}/{len} {msg}")
+                    .expect("valid template")
+                    .progress_chars("█▓▒░ "),
+            );
+
+            // Collect measurements for stats
+            let mut measurements_by_config: HashMap<String, Vec<u64>> = HashMap::new();
+
+            let warmup_count = if skip_warmup { 0 } else { 3 };
+
+            for (idx, config) in benches.iter().enumerate() {
+                let is_warmup = idx < warmup_count;
+
+                let group_name = if is_warmup {
+                    format!("Warmup {}/{}", idx + 1, warmup_count)
+                } else {
+                    config.group.as_deref().unwrap_or("unnamed").to_string()
+                };
+
+                pb.set_message(format!(
+                    "{} ({} Mbps, {}ms)",
+                    group_name, config.bandwidth, config.protocol_latency
+                ));
+
                runner
                    .network
                    .set_proto_config(config.bandwidth, config.protocol_latency.div_ceil(2))?;
@@ -249,11 +377,73 @@ pub async fn main() -> Result<()> {
                    panic!("expected prover output");
                };

-                let measurement = Measurement::new(config, metrics);
+                // Collect metrics for stats (skip warmup benches)
+                if !is_warmup {
+                    let config_key = format!(
+                        "{:?}|{}|{}|{}|{}",
+                        config.group,
+                        config.bandwidth,
+                        config.protocol_latency,
+                        config.upload_size,
+                        config.download_size
+                    );
+                    measurements_by_config
+                        .entry(config_key)
+                        .or_default()
+                        .push(metrics.time_total);
+                }
+
+                let measurement = Measurement::new(config.clone(), metrics);

                writer.serialize(measurement)?;
                writer.flush()?;
+
+                pb.inc(1);
            }
+
+            pb.finish_with_message("Benchmarks complete");
+
+            // Compute and print statistics
+            let mut all_stats: Vec<BenchStats> = Vec::new();
+            for (key, times) in measurements_by_config {
+                // Parse back the config from the key
+                let parts: Vec<&str> = key.split('|').collect();
+                if parts.len() >= 5 {
+                    let group = if parts[0] == "None" {
+                        None
+                    } else {
+                        Some(
+                            parts[0]
+                                .trim_start_matches("Some(\"")
+                                .trim_end_matches("\")")
+                                .to_string(),
+                        )
+                    };
+                    let bandwidth: usize = parts[1].parse().unwrap_or(0);
+                    let latency: usize = parts[2].parse().unwrap_or(0);
+                    let upload_size: usize = parts[3].parse().unwrap_or(0);
+                    let download_size: usize = parts[4].parse().unwrap_or(0);
+
+                    all_stats.push(BenchStats {
+                        group,
+                        bandwidth,
+                        latency,
+                        upload_size,
+                        download_size,
+                        times,
+                    });
+                }
+            }
+
+            // Sort stats by group name for consistent output
+            all_stats.sort_by(|a, b| {
+                a.group
+                    .cmp(&b.group)
+                    .then(a.latency.cmp(&b.latency))
+                    .then(a.bandwidth.cmp(&b.bandwidth))
+            });
+
+            print_bench_summary(&all_stats);
        }
        Command::Serve {} => {
            runner.start_services().await?;
--- a/crates/mpc-tls/Cargo.toml
+++ b/crates/mpc-tls/Cargo.toml
@@ -60,6 +60,8 @@ mpz-common = { workspace = true, features = ["test-utils"] }
 mpz-ot = { workspace = true, features = ["ideal"] }
 mpz-ideal-vm = { workspace = true }

+tlsn-mux = { workspace = true }
+
 cipher-crate = { package = "cipher", version = "0.4" }
 generic-array = { workspace = true }
 rand_chacha = { workspace = true }
@@ -70,6 +72,5 @@ tlsn-tls-client-async = { workspace = true }
 tokio = { workspace = true, features = ["macros", "rt", "rt-multi-thread"] }
 tokio-util = { workspace = true, features = ["compat"] }
 tracing-subscriber = { workspace = true }
-uid-mux = { workspace = true, features = ["serio", "test-utils"] }
 rustls-pki-types = { workspace = true }
 rustls-webpki = { workspace = true }
--- a/crates/mpc-tls/tests/test.rs
+++ b/crates/mpc-tls/tests/test.rs
@@ -123,8 +123,8 @@ fn build_pair(config: Config) -> (MpcTlsLeader, MpcTlsFollower) {

    let (mut mt_a, mut mt_b) = test_mt_context(8);

-    let ctx_a = futures::executor::block_on(mt_a.new_context()).unwrap();
-    let ctx_b = futures::executor::block_on(mt_b.new_context()).unwrap();
+    let ctx_a = mt_a.new_context().unwrap();
+    let ctx_b = mt_b.new_context().unwrap();

    let delta_a = Delta::new(Block::random(&mut rng));
    let delta_b = Delta::new(Block::random(&mut rng));
--- a/crates/tls/client-async/src/lib.rs
+++ b/crates/tls/client-async/src/lib.rs
@@ -24,7 +24,7 @@ use std::{
 };

 #[cfg(feature = "tracing")]
-use tracing::{debug, debug_span, error, trace, warn, Instrument};
+use tracing::{debug, debug_span, trace, warn, Instrument};

 use tls_client::ClientConnection;

--- a/crates/tlsn/Cargo.toml
+++ b/crates/tlsn/Cargo.toml
@@ -20,6 +20,7 @@ web = ["dep:web-spawn"]
 tlsn-attestation = { workspace = true }
 tlsn-core = { workspace = true }
 tlsn-deap = { workspace = true }
+tlsn-mux = { workspace = true }
 tlsn-tls-client = { workspace = true }
 tlsn-tls-client-async = { workspace = true }
 tlsn-tls-core = { workspace = true }
@@ -27,7 +28,6 @@ tlsn-mpc-tls = { workspace = true }
 tlsn-cipher = { workspace = true }

 serio = { workspace = true, features = ["compat"] }
-uid-mux = { workspace = true, features = ["serio"] }
 web-spawn = { workspace = true, optional = true }

 mpz-circuits = { workspace = true, features = ["aes"] }
--- a/crates/tlsn/src/context.rs
+++ b/crates/tlsn/src/context.rs
@@ -1,21 +0,0 @@
-//! Execution context.
-
-use mpz_common::context::Multithread;
-
-use crate::mux::MuxControl;
-
-/// Maximum concurrency for multi-threaded context.
-pub(crate) const MAX_CONCURRENCY: usize = 8;
-
-/// Builds a multi-threaded context with the given muxer.
-pub(crate) fn build_mt_context(mux: MuxControl) -> Multithread {
-    let builder = Multithread::builder().mux(mux).concurrency(MAX_CONCURRENCY);
-
-    #[cfg(all(feature = "web", target_arch = "wasm32"))]
-    let builder = builder.spawn_handler(|f| {
-        let _ = web_spawn::spawn(f);
-        Ok(())
-    });
-
-    builder.build().unwrap()
-}
--- a/crates/tlsn/src/error.rs
+++ b/crates/tlsn/src/error.rs
@@ -0,0 +1,87 @@
+use std::fmt::Display;
+
+/// Crate-level error.
+#[derive(Debug, thiserror::Error)]
+pub struct Error {
+    kind: ErrorKind,
+    msg: Option<String>,
+    source: Option<Box<dyn std::error::Error + Send + Sync>>,
+}
+
+impl Error {
+    pub(crate) fn io() -> Self {
+        Self {
+            kind: ErrorKind::Internal,
+            msg: None,
+            source: None,
+        }
+    }
+
+    pub(crate) fn internal() -> Self {
+        Self {
+            kind: ErrorKind::Internal,
+            msg: None,
+            source: None,
+        }
+    }
+
+    pub(crate) fn with_msg(mut self, msg: impl Into<String>) -> Self {
+        self.msg = Some(msg.into());
+        self
+    }
+
+    pub(crate) fn with_source<T>(mut self, source: T) -> Self
+    where
+        T: Into<Box<dyn std::error::Error + Send + Sync>>,
+    {
+        self.source = Some(source.into());
+        self
+    }
+
+    /// Returns `true` if the error was user created.
+    pub fn is_user(&self) -> bool {
+        todo!()
+    }
+
+    /// Returns `true` if the error originated from an IO error.
+    pub fn is_io(&self) -> bool {
+        self.kind.is_io()
+    }
+
+    /// Returns `true` if the error originated from an internal bug.
+    pub fn is_internal(&self) -> bool {
+        self.kind.is_internal()
+    }
+
+    /// Returns the error message if available.
+    pub fn msg(&self) -> Option<&str> {
+        todo!()
+    }
+}
+
+impl Display for Error {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        todo!()
+    }
+}
+
+#[derive(Debug)]
+enum ErrorKind {
+    User,
+    Io,
+    Internal,
+}
+
+impl ErrorKind {
+    fn is_user(&self) -> bool {
+        matches!(self, ErrorKind::User)
+    }
+
+    fn is_io(&self) -> bool {
+        matches!(self, ErrorKind::Io)
+    }
+
+    fn is_internal(&self) -> bool {
+        matches!(self, ErrorKind::Internal)
+    }
+}
--- a/crates/tlsn/src/lib.rs
+++ b/crates/tlsn/src/lib.rs
@@ -4,20 +4,25 @@
 #![deny(clippy::all)]
 #![forbid(unsafe_code)]

-pub(crate) mod context;
+mod error;
 pub(crate) mod ghash;
 pub(crate) mod map;
 pub(crate) mod mpz;
 pub(crate) mod msg;
-pub(crate) mod mux;
 pub mod prover;
+mod session;
 pub(crate) mod tag;
 pub(crate) mod transcript_internal;
 pub mod verifier;

+pub use error::Error;
+pub use session::Session;
 pub use tlsn_attestation as attestation;
 pub use tlsn_core::{config, connection, hash, transcript, webpki};

+/// Result type.
+pub type Result<T, E = Error> = core::result::Result<T, E>;
+
 use std::sync::LazyLock;

 use semver::Version;
--- a/crates/tlsn/src/map.rs
+++ b/crates/tlsn/src/map.rs
@@ -21,20 +21,6 @@ impl<T> RangeMap<T>
 where
    T: Item,
 {
-    pub(crate) fn new(map: Vec<(usize, T)>) -> Self {
-        let mut pos = 0;
-        for (idx, item) in &map {
-            assert!(
-                *idx >= pos,
-                "items must be sorted by index and non-overlapping"
-            );
-
-            pos = *idx + item.length();
-        }
-
-        Self { map }
-    }
-
    /// Returns `true` if the map is empty.
    pub(crate) fn is_empty(&self) -> bool {
        self.map.is_empty()
@@ -47,11 +33,6 @@ where
            .map(|(idx, item)| *idx..*idx + item.length())
    }

-    /// Returns the length of the map.
-    pub(crate) fn len(&self) -> usize {
-        self.map.iter().map(|(_, item)| item.length()).sum()
-    }
-
    pub(crate) fn iter(&self) -> impl Iterator<Item = (Range<usize>, &T)> {
        self.map
            .iter()
--- a/crates/tlsn/src/mpz.rs
+++ b/crates/tlsn/src/mpz.rs
@@ -6,11 +6,6 @@ use mpz_core::Block;
 #[cfg(not(tlsn_insecure))]
 use mpz_garble::protocol::semihonest::{Evaluator, Garbler};
 use mpz_garble_core::Delta;
-use mpz_memory_core::{
-    Vector,
-    binary::U8,
-    correlated::{Key, Mac},
-};
 #[cfg(not(tlsn_insecure))]
 use mpz_ot::cot::{DerandCOTReceiver, DerandCOTSender};
 use mpz_ot::{
@@ -24,8 +19,6 @@ use tlsn_core::config::tls_commit::mpc::{MpcTlsConfig, NetworkSetting};
 use tlsn_deap::Deap;
 use tokio::sync::Mutex;

-use crate::transcript_internal::commit::encoding::{KeyStore, MacStore};
-
 #[cfg(not(tlsn_insecure))]
 pub(crate) type ProverMpc =
    Garbler<DerandCOTSender<SharedRCOTSender<kos::Sender<co::Receiver>, Block>>>;
@@ -193,41 +186,3 @@ pub(crate) fn translate_keys<Mpc, Zk>(keys: &mut SessionKeys, vm: &Deap<Mpc, Zk>
        .translate(keys.server_write_mac_key)
        .expect("VM memory should be consistent");
 }
-
-impl<T> KeyStore for Verifier<T> {
-    fn delta(&self) -> &Delta {
-        self.delta()
-    }
-
-    fn get_keys(&self, data: Vector<U8>) -> Option<&[Key]> {
-        self.get_keys(data).ok()
-    }
-}
-
-impl<T> MacStore for Prover<T> {
-    fn get_macs(&self, data: Vector<U8>) -> Option<&[Mac]> {
-        self.get_macs(data).ok()
-    }
-}
-
-#[cfg(tlsn_insecure)]
-mod insecure {
-    use super::*;
-    use mpz_ideal_vm::IdealVm;
-
-    impl KeyStore for IdealVm {
-        fn delta(&self) -> &Delta {
-            unimplemented!("encodings not supported in insecure mode")
-        }
-
-        fn get_keys(&self, _data: Vector<U8>) -> Option<&[Key]> {
-            unimplemented!("encodings not supported in insecure mode")
-        }
-    }
-
-    impl MacStore for IdealVm {
-        fn get_macs(&self, _data: Vector<U8>) -> Option<&[Mac]> {
-            unimplemented!("encodings not supported in insecure mode")
-        }
-    }
-}
--- a/crates/tlsn/src/mux.rs
+++ b/crates/tlsn/src/mux.rs
@@ -1,90 +0,0 @@
-//! Multiplexer used in the TLSNotary protocol.
-
-use std::future::IntoFuture;
-
-use futures::{
-    AsyncRead, AsyncWrite, Future,
-    future::{FusedFuture, FutureExt},
-};
-use tracing::error;
-use uid_mux::yamux;
-
-use crate::Role;
-
-/// Multiplexer supporting unique deterministic stream IDs.
-pub(crate) type Mux<Io> = yamux::Yamux<Io>;
-/// Multiplexer controller providing streams.
-pub(crate) type MuxControl = yamux::YamuxCtrl;
-
-/// Multiplexer future which must be polled for the muxer to make progress.
-pub(crate) struct MuxFuture(
-    Box<dyn FusedFuture<Output = Result<(), yamux::ConnectionError>> + Send + Unpin>,
-);
-
-impl MuxFuture {
-    /// Returns true if the muxer is complete.
-    pub(crate) fn is_complete(&self) -> bool {
-        self.0.is_terminated()
-    }
-
-    /// Awaits a future, polling the muxer future concurrently.
-    pub(crate) async fn poll_with<F, R>(&mut self, fut: F) -> R
-    where
-        F: Future<Output = R>,
-    {
-        let mut fut = Box::pin(fut.fuse());
-        // Poll the future concurrently with the muxer future.
-        // If the muxer returns an error, continue polling the future
-        // until it completes.
-        loop {
-            futures::select! {
-                res = fut => return res,
-                res = &mut self.0 => if let Err(e) = res {
-                    error!("mux error: {:?}", e);
-                },
-            }
-        }
-    }
-}
-
-impl Future for MuxFuture {
-    type Output = Result<(), yamux::ConnectionError>;
-
-    fn poll(
-        mut self: std::pin::Pin<&mut Self>,
-        cx: &mut std::task::Context<'_>,
-    ) -> std::task::Poll<Self::Output> {
-        self.0.as_mut().poll_unpin(cx)
-    }
-}
-
-/// Attaches a multiplexer to the provided socket.
-///
-/// Returns the multiplexer and a controller for creating streams with a codec
-/// attached.
-///
-/// # Arguments
-///
-/// * `socket` - The socket to attach the multiplexer to.
-/// * `role` - The role of the party using the multiplexer.
-pub(crate) fn attach_mux<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
-    socket: T,
-    role: Role,
-) -> (MuxFuture, MuxControl) {
-    let mut mux_config = yamux::Config::default();
-    mux_config.set_max_num_streams(36);
-
-    let mux_role = match role {
-        Role::Prover => yamux::Mode::Client,
-        Role::Verifier => yamux::Mode::Server,
-    };
-
-    let mux = Mux::new(socket, mux_config, mux_role);
-    let ctrl = mux.control();
-
-    if let Role::Prover = role {
-        ctrl.alloc(32);
-    }
-
-    (MuxFuture(Box::new(mux.into_future().fuse())), ctrl)
-}
--- a/crates/tlsn/src/prover.rs
+++ b/crates/tlsn/src/prover.rs
@@ -7,14 +7,13 @@ pub mod state;

 pub use error::ProverError;
 pub use future::ProverFuture;
+use mpz_common::Context;
 pub use tlsn_core::ProverOutput;

 use crate::{
-    Role,
-    context::build_mt_context,
    mpz::{ProverDeps, build_prover_deps, translate_keys},
    msg::{ProveRequestMsg, Response, TlsCommitRequestMsg},
-    mux::attach_mux,
+    prover::error::ErrorKind,
    tag::verify_tags,
 };

@@ -45,6 +44,7 @@ use tracing::{Instrument, Span, debug, info, info_span, instrument};
 pub struct Prover<T: state::ProverState = state::Initialized> {
    config: ProverConfig,
    span: Span,
+    ctx: Option<Context>,
    state: T,
 }

@@ -53,12 +53,14 @@ impl Prover<state::Initialized> {
    ///
    /// # Arguments
    ///
+    /// * `ctx` - A thread context.
    /// * `config` - The configuration for the prover.
-    pub fn new(config: ProverConfig) -> Self {
+    pub(crate) fn new(ctx: Context, config: ProverConfig) -> Self {
        let span = info_span!("prover");
        Self {
            config,
            span,
+            ctx: Some(ctx),
            state: state::Initialized,
        }
    }
@@ -71,35 +73,30 @@ impl Prover<state::Initialized> {
    /// # Arguments
    ///
    /// * `config` - The TLS commitment configuration.
-    /// * `socket` - The socket to the TLS verifier.
    #[instrument(parent = &self.span, level = "debug", skip_all, err)]
-    pub async fn commit<S: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
-        self,
+    pub async fn commit(
+        mut self,
        config: TlsCommitConfig,
-        socket: S,
    ) -> Result<Prover<state::CommitAccepted>, ProverError> {
-        let (mut mux_fut, mux_ctrl) = attach_mux(socket, Role::Prover);
-        let mut mt = build_mt_context(mux_ctrl.clone());
-        let mut ctx = mux_fut.poll_with(mt.new_context()).await?;
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| ProverError::new(ErrorKind::Io, "context was dropped"))?;

        // Sends protocol configuration to verifier for compatibility check.
-        mux_fut
-            .poll_with(async {
-                ctx.io_mut()
-                    .send(TlsCommitRequestMsg {
-                        request: config.to_request(),
-                        version: crate::VERSION.clone(),
-                    })
-                    .await?;
-
-                ctx.io_mut()
-                    .expect_next::<Response>()
-                    .await?
-                    .result
-                    .map_err(ProverError::from)
+        ctx.io_mut()
+            .send(TlsCommitRequestMsg {
+                request: config.to_request(),
+                version: crate::VERSION.clone(),
            })
            .await?;

+        ctx.io_mut()
+            .expect_next::<Response>()
+            .await?
+            .result
+            .map_err(ProverError::from)?;
+
        let TlsCommitProtocolConfig::Mpc(mpc_tls_config) = config.protocol().clone() else {
            unreachable!("only MPC TLS is supported");
        };
@@ -114,20 +111,15 @@ impl Prover<state::Initialized> {

        debug!("setting up mpc-tls");

-        mux_fut.poll_with(mpc_tls.preprocess()).await?;
+        mpc_tls.preprocess().await?;

        debug!("mpc-tls setup complete");

        Ok(Prover {
            config: self.config,
            span: self.span,
-            state: state::CommitAccepted {
-                mux_ctrl,
-                mux_fut,
-                mpc_tls,
-                keys,
-                vm,
-            },
+            ctx: None,
+            state: state::CommitAccepted { mpc_tls, keys, vm },
        })
    }
 }
@@ -150,12 +142,7 @@ impl Prover<state::CommitAccepted> {
        socket: S,
    ) -> Result<(TlsConnection, ProverFuture), ProverError> {
        let state::CommitAccepted {
-            mux_ctrl,
-            mut mux_fut,
-            mpc_tls,
-            keys,
-            vm,
-            ..
+            mpc_tls, keys, vm, ..
        } = self.state;

        let (mpc_ctrl, mpc_fut) = mpc_tls.run();
@@ -209,10 +196,7 @@ impl Prover<state::CommitAccepted> {
            let mpc_ctrl = mpc_ctrl.clone();
            async move {
                let conn_fut = async {
-                    mux_fut
-                        .poll_with(conn_fut.map_err(ProverError::from))
-                        .await?;
-
+                    conn_fut.await.map_err(ProverError::from)?;
                    mpc_ctrl.stop().await?;

                    Ok::<_, ProverError>(())
@@ -233,10 +217,7 @@ impl Prover<state::CommitAccepted> {
                    debug!("finalizing mpc");

                    // Finalize DEAP.
-                    mux_fut
-                        .poll_with(vm.finalize(&mut ctx))
-                        .await
-                        .map_err(ProverError::mpc)?;
+                    vm.finalize(&mut ctx).await.map_err(ProverError::mpc)?;

                    debug!("mpc finalized");
                }
@@ -258,9 +239,7 @@ impl Prover<state::CommitAccepted> {
                )
                .map_err(ProverError::zk)?;

-                mux_fut
-                    .poll_with(vm.execute_all(&mut ctx).map_err(ProverError::zk))
-                    .await?;
+                vm.execute_all(&mut ctx).await.map_err(ProverError::zk)?;

                let transcript = tls_transcript
                    .to_transcript()
@@ -269,10 +248,8 @@ impl Prover<state::CommitAccepted> {
                Ok(Prover {
                    config: self.config,
                    span: self.span,
+                    ctx: Some(ctx),
                    state: state::Committed {
-                        mux_ctrl,
-                        mux_fut,
-                        ctx,
                        vm,
                        server_name: config.server_name().clone(),
                        keys,
@@ -312,9 +289,11 @@ impl Prover<state::Committed> {
    /// * `config` - The disclosure configuration.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
    pub async fn prove(&mut self, config: &ProveConfig) -> Result<ProverOutput, ProverError> {
+        let ctx = self
+            .ctx
+            .as_mut()
+            .ok_or_else(|| ProverError::new(ErrorKind::Io, "context was dropped"))?;
        let state::Committed {
-            mux_fut,
-            ctx,
            vm,
            keys,
            server_name,
@@ -350,15 +329,10 @@ impl Prover<state::Committed> {
            transcript: partial_transcript,
        };

-        let output = mux_fut
-            .poll_with(async {
-                ctx.io_mut().send(msg).await.map_err(ProverError::from)?;
+        ctx.io_mut().send(msg).await.map_err(ProverError::from)?;
+        ctx.io_mut().expect_next::<Response>().await?.result?;

-                ctx.io_mut().expect_next::<Response>().await?.result?;
-
-                prove::prove(ctx, vm, keys, transcript, tls_transcript, config).await
-            })
-            .await?;
+        let output = prove::prove(ctx, vm, keys, transcript, tls_transcript, config).await?;

        Ok(output)
    }
@@ -366,16 +340,6 @@ impl Prover<state::Committed> {
    /// Closes the connection with the verifier.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
    pub async fn close(self) -> Result<(), ProverError> {
-        let state::Committed {
-            mux_ctrl, mux_fut, ..
-        } = self.state;
-
-        // Wait for the verifier to correctly close the connection.
-        if !mux_fut.is_complete() {
-            mux_ctrl.close();
-            mux_fut.await?;
-        }
-
        Ok(())
    }
 }
--- a/crates/tlsn/src/prover/error.rs
+++ b/crates/tlsn/src/prover/error.rs
@@ -2,8 +2,6 @@ use std::{error::Error, fmt};

 use mpc_tls::MpcTlsError;

-use crate::transcript_internal::commit::encoding::EncodingError;
-
 /// Error for [`Prover`](crate::prover::Prover).
 #[derive(Debug, thiserror::Error)]
 pub struct ProverError {
@@ -12,7 +10,7 @@ pub struct ProverError {
 }

 impl ProverError {
-    fn new<E>(kind: ErrorKind, source: E) -> Self
+    pub(crate) fn new<E>(kind: ErrorKind, source: E) -> Self
    where
        E: Into<Box<dyn Error + Send + Sync + 'static>>,
    {
@@ -52,7 +50,7 @@ impl ProverError {
 }

 #[derive(Debug)]
-enum ErrorKind {
+pub(crate) enum ErrorKind {
    Io,
    Mpc,
    Zk,
@@ -92,8 +90,8 @@ impl From<tls_client_async::ConnectionError> for ProverError {
    }
 }

-impl From<uid_mux::yamux::ConnectionError> for ProverError {
-    fn from(e: uid_mux::yamux::ConnectionError) -> Self {
+impl From<tlsn_mux::ConnectionError> for ProverError {
+    fn from(e: tlsn_mux::ConnectionError) -> Self {
        Self::new(ErrorKind::Io, e)
    }
 }
@@ -109,9 +107,3 @@ impl From<MpcTlsError> for ProverError {
        Self::new(ErrorKind::Mpc, e)
    }
 }
-
-impl From<EncodingError> for ProverError {
-    fn from(e: EncodingError) -> Self {
-        Self::new(ErrorKind::Commit, e)
-    }
-}
--- a/crates/tlsn/src/prover/prove.rs
+++ b/crates/tlsn/src/prover/prove.rs
@@ -13,17 +13,10 @@ use tlsn_core::{

 use crate::{
    prover::ProverError,
-    transcript_internal::{
-        TranscriptRefs,
-        auth::prove_plaintext,
-        commit::{
-            encoding::{self, MacStore},
-            hash::prove_hash,
-        },
-    },
+    transcript_internal::{TranscriptRefs, auth::prove_plaintext, commit::hash::prove_hash},
 };

-pub(crate) async fn prove<T: Vm<Binary> + MacStore + Send + Sync>(
+pub(crate) async fn prove<T: Vm<Binary> + Send + Sync>(
    ctx: &mut Context,
    vm: &mut T,
    keys: &SessionKeys,
@@ -45,13 +38,6 @@ pub(crate) async fn prove<T: Vm<Binary> + MacStore + Send + Sync>(
                Direction::Sent => commit_sent.union_mut(idx),
                Direction::Received => commit_recv.union_mut(idx),
            });
-
-        commit_config
-            .iter_encoding()
-            .for_each(|(direction, idx)| match direction {
-                Direction::Sent => commit_sent.union_mut(idx),
-                Direction::Received => commit_recv.union_mut(idx),
-            });
    }

    let transcript_refs = TranscriptRefs {
@@ -102,45 +88,6 @@ pub(crate) async fn prove<T: Vm<Binary> + MacStore + Send + Sync>(

    vm.execute_all(ctx).await.map_err(ProverError::zk)?;

-    if let Some(commit_config) = config.transcript_commit()
-        && commit_config.has_encoding()
-    {
-        let mut sent_ranges = RangeSet::default();
-        let mut recv_ranges = RangeSet::default();
-        for (dir, idx) in commit_config.iter_encoding() {
-            match dir {
-                Direction::Sent => sent_ranges.union_mut(idx),
-                Direction::Received => recv_ranges.union_mut(idx),
-            }
-        }
-
-        let sent_map = transcript_refs
-            .sent
-            .index(&sent_ranges)
-            .expect("indices are valid");
-        let recv_map = transcript_refs
-            .recv
-            .index(&recv_ranges)
-            .expect("indices are valid");
-
-        let (commitment, tree) = encoding::receive(
-            ctx,
-            vm,
-            *commit_config.encoding_hash_alg(),
-            &sent_map,
-            &recv_map,
-            commit_config.iter_encoding(),
-        )
-        .await?;
-
-        output
-            .transcript_commitments
-            .push(TranscriptCommitment::Encoding(commitment));
-        output
-            .transcript_secrets
-            .push(TranscriptSecret::Encoding(tree));
-    }
-
    if let Some((hash_fut, hash_secrets)) = hash_commitments {
        let hash_commitments = hash_fut.try_recv().map_err(ProverError::commit)?;
        for (commitment, secret) in hash_commitments.into_iter().zip(hash_secrets) {
--- a/crates/tlsn/src/prover/state.rs
+++ b/crates/tlsn/src/prover/state.rs
@@ -3,7 +3,6 @@
 use std::sync::Arc;

 use mpc_tls::{MpcTlsLeader, SessionKeys};
-use mpz_common::Context;
 use tlsn_core::{
    connection::ServerName,
    transcript::{TlsTranscript, Transcript},
@@ -11,10 +10,7 @@ use tlsn_core::{
 use tlsn_deap::Deap;
 use tokio::sync::Mutex;

-use crate::{
-    mpz::{ProverMpc, ProverZk},
-    mux::{MuxControl, MuxFuture},
-};
+use crate::mpz::{ProverMpc, ProverZk};

 /// Entry state
 pub struct Initialized;
@@ -24,8 +20,6 @@ opaque_debug::implement!(Initialized);
 /// State after the verifier has accepted the proposed TLS commitment protocol
 /// configuration and preprocessing has completed.
 pub struct CommitAccepted {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
    pub(crate) mpc_tls: MpcTlsLeader,
    pub(crate) keys: SessionKeys,
    pub(crate) vm: Arc<Mutex<Deap<ProverMpc, ProverZk>>>,
@@ -35,9 +29,6 @@ opaque_debug::implement!(CommitAccepted);

 /// State after the TLS transcript has been committed.
 pub struct Committed {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
-    pub(crate) ctx: Context,
    pub(crate) vm: ProverZk,
    pub(crate) server_name: ServerName,
    pub(crate) keys: SessionKeys,
--- a/crates/tlsn/src/session.rs
+++ b/crates/tlsn/src/session.rs
@@ -0,0 +1,293 @@
+use std::{
+    future::Future,
+    pin::Pin,
+    sync::{
+        atomic::{AtomicBool, Ordering},
+        Arc,
+    },
+    task::{Context, Poll},
+};
+
+use futures::{AsyncRead, AsyncWrite};
+use mpz_common::{ThreadId, context::Multithread, io::Io, mux::Mux};
+use tlsn_core::config::{prover::ProverConfig, verifier::VerifierConfig};
+use tlsn_mux::{Connection, Handle};
+
+use crate::{
+    Error, Result,
+    prover::{Prover, state as prover_state},
+    verifier::{Verifier, state as verifier_state},
+};
+
+/// Maximum concurrency for multi-threaded context.
+const MAX_CONCURRENCY: usize = 8;
+
+/// Session state.
+#[must_use = "session must be polled continuously to make progress, including during closing."]
+pub struct Session<Io> {
+    conn: Option<Connection<Io>>,
+    mt: Multithread,
+}
+
+impl<Io> Session<Io>
+where
+    Io: AsyncRead + AsyncWrite + Unpin,
+{
+    /// Creates a new session.
+    pub fn new(io: Io) -> Self {
+        let mut mux_config = tlsn_mux::Config::default();
+
+        mux_config.set_max_num_streams(36);
+        mux_config.set_keep_alive(true);
+        mux_config.set_close_sync(true);
+
+        let conn = tlsn_mux::Connection::new(io, mux_config);
+        let handle = conn.handle().expect("handle should be available");
+        let mt = build_mt_context(MuxHandle { handle: handle });
+
+        Self {
+            conn: Some(conn),
+            mt,
+        }
+    }
+
+    /// Creates a new prover.
+    pub fn new_prover(
+        &mut self,
+        config: ProverConfig,
+    ) -> Result<Prover<prover_state::Initialized>> {
+        let ctx = self.mt.new_context().map_err(|e| {
+            Error::internal()
+                .with_msg("failed to created new prover")
+                .with_source(e)
+        })?;
+
+        Ok(Prover::new(ctx, config))
+    }
+
+    /// Creates a new verifier.
+    pub fn new_verifier(
+        &mut self,
+        config: VerifierConfig,
+    ) -> Result<Verifier<verifier_state::Initialized>> {
+        let ctx = self.mt.new_context().map_err(|e| {
+            Error::internal()
+                .with_msg("failed to created new verifier")
+                .with_source(e)
+        })?;
+
+        Ok(Verifier::new(ctx, config))
+    }
+
+    /// Returns `true` if the session is closed.
+    pub fn is_closed(&self) -> bool {
+        self.conn
+            .as_ref()
+            .map(|mux| mux.is_complete())
+            .unwrap_or_default()
+    }
+
+    /// Closes the session.
+    ///
+    /// This will cause the session to begin closing. Session must continue to be polled until completion.
+    pub fn close(&mut self) {
+        self.conn.as_mut().map(|conn| conn.close());
+    }
+
+    /// Attempts to take the IO, returning an error if it is not available.
+    pub fn try_take(&mut self) -> Result<Io> {
+        let conn = self.conn.take().ok_or_else(|| {
+            Error::io().with_msg("failed to take the session io, it was already taken")
+        })?;
+
+        match conn.try_into_io() {
+            Err(conn) => {
+                self.conn = Some(conn);
+                Err(Error::io()
+                    .with_msg("failed to take the session io, session was not completed yet"))
+            }
+            Ok(conn) => Ok(conn),
+        }
+    }
+
+    /// Polls the session.
+    pub fn poll(&mut self, cx: &mut Context<'_>) -> Poll<Result<()>> {
+        self.conn
+            .as_mut()
+            .ok_or_else(|| {
+                Error::io()
+                    .with_msg("failed to poll the session connection because it has been taken")
+            })?
+            .poll(cx)
+            .map_err(|e| {
+                Error::io()
+                    .with_msg("error occurred while polling the session connection")
+                    .with_source(e)
+            })
+    }
+
+    /// Splits the session into a driver and handle.
+    ///
+    /// The driver must be polled to make progress. The handle is used
+    /// for creating provers/verifiers and closing the session.
+    pub fn split(self) -> (SessionDriver<Io>, SessionHandle) {
+        let should_close = Arc::new(AtomicBool::new(false));
+
+        (
+            SessionDriver {
+                conn: self.conn,
+                should_close: should_close.clone(),
+            },
+            SessionHandle {
+                mt: self.mt,
+                should_close,
+            },
+        )
+    }
+}
+
+impl<Io> Future for Session<Io>
+where
+    Io: AsyncRead + AsyncWrite + Unpin,
+{
+    type Output = Result<()>;
+
+    fn poll(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Self::Output> {
+        Session::poll(&mut (*self), cx)
+    }
+}
+
+/// The polling half of a split session.
+///
+/// Must be polled continuously to drive the session. Returns the underlying
+/// IO when the session closes.
+#[must_use = "driver must be polled to make progress"]
+pub struct SessionDriver<Io> {
+    conn: Option<Connection<Io>>,
+    should_close: Arc<AtomicBool>,
+}
+
+impl<Io> SessionDriver<Io>
+where
+    Io: AsyncRead + AsyncWrite + Unpin,
+{
+    /// Polls the driver.
+    pub fn poll(&mut self, cx: &mut Context<'_>) -> Poll<Result<Io>> {
+        let conn = self.conn.as_mut().ok_or_else(|| {
+            Error::io().with_msg("session driver already completed")
+        })?;
+
+        if self.should_close.load(Ordering::Acquire) {
+            conn.close();
+        }
+
+        match conn.poll(cx) {
+            Poll::Ready(Ok(())) => {}
+            Poll::Ready(Err(e)) => {
+                return Poll::Ready(Err(Error::io()
+                    .with_msg("error polling session connection")
+                    .with_source(e)));
+            }
+            Poll::Pending => return Poll::Pending,
+        }
+
+        let conn = self.conn.take().unwrap();
+        Poll::Ready(conn.try_into_io().map_err(|_| {
+            Error::io().with_msg("failed to take session io")
+        }))
+    }
+}
+
+impl<Io> Future for SessionDriver<Io>
+where
+    Io: AsyncRead + AsyncWrite + Unpin,
+{
+    type Output = Result<Io>;
+
+    fn poll(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Self::Output> {
+        SessionDriver::poll(&mut *self, cx)
+    }
+}
+
+/// The control half of a split session.
+///
+/// Used to create provers/verifiers and control the session lifecycle.
+pub struct SessionHandle {
+    mt: Multithread,
+    should_close: Arc<AtomicBool>,
+}
+
+impl SessionHandle {
+    /// Creates a new prover.
+    pub fn new_prover(
+        &mut self,
+        config: ProverConfig,
+    ) -> Result<Prover<prover_state::Initialized>> {
+        let ctx = self.mt.new_context().map_err(|e| {
+            Error::internal()
+                .with_msg("failed to create new prover")
+                .with_source(e)
+        })?;
+
+        Ok(Prover::new(ctx, config))
+    }
+
+    /// Creates a new verifier.
+    pub fn new_verifier(
+        &mut self,
+        config: VerifierConfig,
+    ) -> Result<Verifier<verifier_state::Initialized>> {
+        let ctx = self.mt.new_context().map_err(|e| {
+            Error::internal()
+                .with_msg("failed to create new verifier")
+                .with_source(e)
+        })?;
+
+        Ok(Verifier::new(ctx, config))
+    }
+
+    /// Signals the session to close.
+    ///
+    /// The driver must continue to be polled until it completes.
+    pub fn close(&self) {
+        self.should_close.store(true, Ordering::Release);
+    }
+}
+
+/// Multiplexer controller providing streams.
+struct MuxHandle {
+    handle: Handle,
+}
+
+impl std::fmt::Debug for MuxHandle {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        f.debug_struct("MuxHandle").finish_non_exhaustive()
+    }
+}
+
+impl Mux for MuxHandle {
+    fn open(&self, id: ThreadId) -> Result<Io, std::io::Error> {
+        let stream = self
+            .handle
+            .new_stream(id.as_ref())
+            .map_err(std::io::Error::other)?;
+        let io = Io::from_io(stream);
+
+        Ok(io)
+    }
+}
+
+/// Builds a multi-threaded context with the given muxer.
+fn build_mt_context(mux: MuxHandle) -> Multithread {
+    let builder = Multithread::builder()
+        .mux(Box::new(mux) as Box<_>)
+        .concurrency(MAX_CONCURRENCY);
+
+    #[cfg(all(feature = "web", target_arch = "wasm32"))]
+    let builder = builder.spawn_handler(|f| {
+        let _ = web_spawn::spawn(f);
+        Ok(())
+    });
+
+    builder.build().unwrap()
+}
--- a/crates/tlsn/src/transcript_internal/commit.rs
+++ b/crates/tlsn/src/transcript_internal/commit.rs
@@ -1,4 +1,3 @@
 //! Plaintext commitment and proof of encryption.

-pub(crate) mod encoding;
 pub(crate) mod hash;
--- a/crates/tlsn/src/transcript_internal/commit/encoding.rs
+++ b/crates/tlsn/src/transcript_internal/commit/encoding.rs
@@ -1,267 +0,0 @@
-//! Encoding commitment protocol.
-
-use std::ops::Range;
-
-use mpz_common::Context;
-use mpz_memory_core::{
-    Vector,
-    binary::U8,
-    correlated::{Delta, Key, Mac},
-};
-use rand::Rng;
-use rangeset::set::RangeSet;
-use serde::{Deserialize, Serialize};
-use serio::{SinkExt, stream::IoStreamExt};
-use tlsn_core::{
-    hash::{Blake3, HashAlgId, HashAlgorithm, Keccak256, Sha256},
-    transcript::{
-        Direction,
-        encoding::{
-            Encoder, EncoderSecret, EncodingCommitment, EncodingProvider, EncodingProviderError,
-            EncodingTree, EncodingTreeError, new_encoder,
-        },
-    },
-};
-
-use crate::{
-    map::{Item, RangeMap},
-    transcript_internal::ReferenceMap,
-};
-
-/// Bytes of encoding, per byte.
-const ENCODING_SIZE: usize = 128;
-
-#[derive(Debug, Serialize, Deserialize)]
-struct Encodings {
-    sent: Vec<u8>,
-    recv: Vec<u8>,
-}
-
-/// Transfers encodings for the provided plaintext ranges.
-pub(crate) async fn transfer<K: KeyStore>(
-    ctx: &mut Context,
-    store: &K,
-    sent: &ReferenceMap,
-    recv: &ReferenceMap,
-) -> Result<(EncoderSecret, EncodingCommitment), EncodingError> {
-    let secret = EncoderSecret::new(rand::rng().random(), store.delta().as_block().to_bytes());
-    let encoder = new_encoder(&secret);
-
-    // Collects the encodings for the provided plaintext ranges.
-    fn collect_encodings(
-        encoder: &impl Encoder,
-        store: &impl KeyStore,
-        direction: Direction,
-        map: &ReferenceMap,
-    ) -> Vec<u8> {
-        let mut encodings = Vec::with_capacity(map.len() * ENCODING_SIZE);
-        for (range, chunk) in map.iter() {
-            let start = encodings.len();
-            encoder.encode_range(direction, range, &mut encodings);
-            let keys = store
-                .get_keys(*chunk)
-                .expect("keys are present for provided plaintext ranges");
-            encodings[start..]
-                .iter_mut()
-                .zip(keys.iter().flat_map(|key| key.as_block().as_bytes()))
-                .for_each(|(encoding, key)| {
-                    *encoding ^= *key;
-                });
-        }
-        encodings
-    }
-
-    let encodings = Encodings {
-        sent: collect_encodings(&encoder, store, Direction::Sent, sent),
-        recv: collect_encodings(&encoder, store, Direction::Received, recv),
-    };
-
-    let frame_limit = ctx
-        .io()
-        .limit()
-        .saturating_add(encodings.sent.len() + encodings.recv.len());
-    ctx.io_mut().with_limit(frame_limit).send(encodings).await?;
-
-    let root = ctx.io_mut().expect_next().await?;
-
-    Ok((secret, EncodingCommitment { root }))
-}
-
-/// Receives and commits to the encodings for the provided plaintext ranges.
-pub(crate) async fn receive<M: MacStore>(
-    ctx: &mut Context,
-    store: &M,
-    hash_alg: HashAlgId,
-    sent: &ReferenceMap,
-    recv: &ReferenceMap,
-    idxs: impl IntoIterator<Item = &(Direction, RangeSet<usize>)>,
-) -> Result<(EncodingCommitment, EncodingTree), EncodingError> {
-    let hasher: &(dyn HashAlgorithm + Send + Sync) = match hash_alg {
-        HashAlgId::SHA256 => &Sha256::default(),
-        HashAlgId::KECCAK256 => &Keccak256::default(),
-        HashAlgId::BLAKE3 => &Blake3::default(),
-        alg => {
-            return Err(ErrorRepr::UnsupportedHashAlgorithm(alg).into());
-        }
-    };
-
-    let (sent_len, recv_len) = (sent.len(), recv.len());
-    let frame_limit = ctx
-        .io()
-        .limit()
-        .saturating_add(ENCODING_SIZE * (sent_len + recv_len));
-    let encodings: Encodings = ctx.io_mut().with_limit(frame_limit).expect_next().await?;
-
-    if encodings.sent.len() != sent_len * ENCODING_SIZE {
-        return Err(ErrorRepr::IncorrectMacCount {
-            direction: Direction::Sent,
-            expected: sent_len,
-            got: encodings.sent.len() / ENCODING_SIZE,
-        }
-        .into());
-    }
-
-    if encodings.recv.len() != recv_len * ENCODING_SIZE {
-        return Err(ErrorRepr::IncorrectMacCount {
-            direction: Direction::Received,
-            expected: recv_len,
-            got: encodings.recv.len() / ENCODING_SIZE,
-        }
-        .into());
-    }
-
-    // Collects a map of plaintext ranges to their encodings.
-    fn collect_map(
-        store: &impl MacStore,
-        mut encodings: Vec<u8>,
-        map: &ReferenceMap,
-    ) -> RangeMap<EncodingSlice> {
-        let mut encoding_map = Vec::new();
-        let mut pos = 0;
-        for (range, chunk) in map.iter() {
-            let macs = store
-                .get_macs(*chunk)
-                .expect("MACs are present for provided plaintext ranges");
-            let encoding = &mut encodings[pos..pos + range.len() * ENCODING_SIZE];
-            encoding
-                .iter_mut()
-                .zip(macs.iter().flat_map(|mac| mac.as_bytes()))
-                .for_each(|(encoding, mac)| {
-                    *encoding ^= *mac;
-                });
-
-            encoding_map.push((range.start, EncodingSlice::from(&(*encoding))));
-            pos += range.len() * ENCODING_SIZE;
-        }
-        RangeMap::new(encoding_map)
-    }
-
-    let provider = Provider {
-        sent: collect_map(store, encodings.sent, sent),
-        recv: collect_map(store, encodings.recv, recv),
-    };
-
-    let tree = EncodingTree::new(hasher, idxs, &provider)?;
-    let root = tree.root();
-
-    ctx.io_mut().send(root.clone()).await?;
-
-    let commitment = EncodingCommitment { root };
-
-    Ok((commitment, tree))
-}
-
-pub(crate) trait KeyStore {
-    fn delta(&self) -> &Delta;
-
-    fn get_keys(&self, data: Vector<U8>) -> Option<&[Key]>;
-}
-
-pub(crate) trait MacStore {
-    fn get_macs(&self, data: Vector<U8>) -> Option<&[Mac]>;
-}
-
-#[derive(Debug)]
-struct Provider {
-    sent: RangeMap<EncodingSlice>,
-    recv: RangeMap<EncodingSlice>,
-}
-
-impl EncodingProvider for Provider {
-    fn provide_encoding(
-        &self,
-        direction: Direction,
-        range: Range<usize>,
-        dest: &mut Vec<u8>,
-    ) -> Result<(), EncodingProviderError> {
-        let encodings = match direction {
-            Direction::Sent => &self.sent,
-            Direction::Received => &self.recv,
-        };
-
-        let encoding = encodings.get(range).ok_or(EncodingProviderError)?;
-
-        dest.extend_from_slice(encoding);
-
-        Ok(())
-    }
-}
-
-#[derive(Debug)]
-struct EncodingSlice(Vec<u8>);
-
-impl From<&[u8]> for EncodingSlice {
-    fn from(value: &[u8]) -> Self {
-        Self(value.to_vec())
-    }
-}
-
-impl Item for EncodingSlice {
-    type Slice<'a>
-        = &'a [u8]
-    where
-        Self: 'a;
-
-    fn length(&self) -> usize {
-        self.0.len() / ENCODING_SIZE
-    }
-
-    fn slice<'a>(&'a self, range: Range<usize>) -> Option<Self::Slice<'a>> {
-        self.0
-            .get(range.start * ENCODING_SIZE..range.end * ENCODING_SIZE)
-    }
-}
-
-/// Encoding protocol error.
-#[derive(Debug, thiserror::Error)]
-#[error(transparent)]
-pub struct EncodingError(#[from] ErrorRepr);
-
-#[derive(Debug, thiserror::Error)]
-#[error("encoding protocol error: {0}")]
-enum ErrorRepr {
-    #[error("I/O error: {0}")]
-    Io(std::io::Error),
-    #[error("incorrect MAC count for {direction}: expected {expected}, got {got}")]
-    IncorrectMacCount {
-        direction: Direction,
-        expected: usize,
-        got: usize,
-    },
-    #[error("encoding tree error: {0}")]
-    EncodingTree(EncodingTreeError),
-    #[error("unsupported hash algorithm: {0}")]
-    UnsupportedHashAlgorithm(HashAlgId),
-}
-
-impl From<std::io::Error> for EncodingError {
-    fn from(value: std::io::Error) -> Self {
-        Self(ErrorRepr::Io(value))
-    }
-}
-
-impl From<EncodingTreeError> for EncodingError {
-    fn from(value: EncodingTreeError) -> Self {
-        Self(ErrorRepr::EncodingTree(value))
-    }
-}
--- a/crates/tlsn/src/verifier.rs
+++ b/crates/tlsn/src/verifier.rs
@@ -7,17 +7,16 @@ mod verify;
 use std::sync::Arc;

 pub use error::VerifierError;
+use mpz_common::Context;
 pub use tlsn_core::{VerifierOutput, webpki::ServerCertVerifier};

 use crate::{
-    Role,
-    context::build_mt_context,
    mpz::{VerifierDeps, build_verifier_deps, translate_keys},
    msg::{ProveRequestMsg, Response, TlsCommitRequestMsg},
-    mux::attach_mux,
    tag::verify_tags,
+    verifier::error::ErrorKind,
 };
-use futures::{AsyncRead, AsyncWrite, TryFutureExt};
+use futures::TryFutureExt;
 use mpz_vm_core::prelude::*;
 use serio::{SinkExt, stream::IoStreamExt};
 use tlsn_core::{
@@ -45,16 +44,18 @@ pub struct SessionInfo {
 pub struct Verifier<T: state::VerifierState = state::Initialized> {
    config: VerifierConfig,
    span: Span,
+    ctx: Option<Context>,
    state: T,
 }

 impl Verifier<state::Initialized> {
    /// Creates a new verifier.
-    pub fn new(config: VerifierConfig) -> Self {
+    pub(crate) fn new(ctx: Context, config: VerifierConfig) -> Self {
        let span = info_span!("verifier");
        Self {
            config,
            span,
+            ctx: Some(ctx),
            state: state::Initialized,
        }
    }
@@ -63,37 +64,22 @@ impl Verifier<state::Initialized> {
    ///
    /// This initiates the TLS commitment protocol, receiving the prover's
    /// configuration and providing the opportunity to accept or reject it.
-    ///
-    /// # Arguments
-    ///
-    /// * `socket` - The socket to the prover.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
-    pub async fn commit<S: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
-        self,
-        socket: S,
-    ) -> Result<Verifier<state::CommitStart>, VerifierError> {
-        let (mut mux_fut, mux_ctrl) = attach_mux(socket, Role::Verifier);
-        let mut mt = build_mt_context(mux_ctrl.clone());
-        let mut ctx = mux_fut.poll_with(mt.new_context()).await?;
+    pub async fn commit(mut self) -> Result<Verifier<state::CommitStart>, VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;

        // Receives protocol configuration from prover to perform compatibility check.
-        let TlsCommitRequestMsg { request, version } =
-            mux_fut.poll_with(ctx.io_mut().expect_next()).await?;
+        let TlsCommitRequestMsg { request, version } = ctx.io_mut().expect_next().await?;

        if version != *crate::VERSION {
            let msg = format!(
                "prover version does not match with verifier: {version} != {}",
                *crate::VERSION
            );
-            mux_fut
-                .poll_with(ctx.io_mut().send(Response::err(Some(msg.clone()))))
-                .await?;
-
-            // Wait for the prover to correctly close the connection.
-            if !mux_fut.is_complete() {
-                mux_ctrl.close();
-                mux_fut.await?;
-            }
+            ctx.io_mut().send(Response::err(Some(msg.clone()))).await?;

            return Err(VerifierError::config(msg));
        }
@@ -101,12 +87,8 @@ impl Verifier<state::Initialized> {
        Ok(Verifier {
            config: self.config,
            span: self.span,
-            state: state::CommitStart {
-                mux_ctrl,
-                mux_fut,
-                ctx,
-                request,
-            },
+            ctx: Some(ctx),
+            state: state::CommitStart { request },
        })
    }
 }
@@ -119,15 +101,14 @@ impl Verifier<state::CommitStart> {

    /// Accepts the proposed protocol configuration.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
-    pub async fn accept(self) -> Result<Verifier<state::CommitAccepted>, VerifierError> {
-        let state::CommitStart {
-            mux_ctrl,
-            mut mux_fut,
-            mut ctx,
-            request,
-        } = self.state;
+    pub async fn accept(mut self) -> Result<Verifier<state::CommitAccepted>, VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;
+        let state::CommitStart { request } = self.state;

-        mux_fut.poll_with(ctx.io_mut().send(Response::ok())).await?;
+        ctx.io_mut().send(Response::ok()).await?;

        let TlsCommitProtocolConfig::Mpc(mpc_tls_config) = request.protocol().clone() else {
            unreachable!("only MPC TLS is supported");
@@ -143,42 +124,27 @@ impl Verifier<state::CommitStart> {

        debug!("setting up mpc-tls");

-        mux_fut.poll_with(mpc_tls.preprocess()).await?;
+        mpc_tls.preprocess().await?;

        debug!("mpc-tls setup complete");

        Ok(Verifier {
            config: self.config,
            span: self.span,
-            state: state::CommitAccepted {
-                mux_ctrl,
-                mux_fut,
-                mpc_tls,
-                keys,
-                vm,
-            },
+            ctx: None,
+            state: state::CommitAccepted { mpc_tls, keys, vm },
        })
    }

    /// Rejects the proposed protocol configuration.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
-    pub async fn reject(self, msg: Option<&str>) -> Result<(), VerifierError> {
-        let state::CommitStart {
-            mux_ctrl,
-            mut mux_fut,
-            mut ctx,
-            ..
-        } = self.state;
+    pub async fn reject(mut self, msg: Option<&str>) -> Result<(), VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;

-        mux_fut
-            .poll_with(ctx.io_mut().send(Response::err(msg)))
-            .await?;
-
-        // Wait for the prover to correctly close the connection.
-        if !mux_fut.is_complete() {
-            mux_ctrl.close();
-            mux_fut.await?;
-        }
+        ctx.io_mut().send(Response::err(msg)).await?;

        Ok(())
    }
@@ -188,17 +154,11 @@ impl Verifier<state::CommitAccepted> {
    /// Runs the verifier until the TLS connection is closed.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
    pub async fn run(self) -> Result<Verifier<state::Committed>, VerifierError> {
-        let state::CommitAccepted {
-            mux_ctrl,
-            mut mux_fut,
-            mpc_tls,
-            vm,
-            keys,
-        } = self.state;
+        let state::CommitAccepted { mpc_tls, vm, keys } = self.state;

        info!("starting MPC-TLS");

-        let (mut ctx, tls_transcript) = mux_fut.poll_with(mpc_tls.run()).await?;
+        let (mut ctx, tls_transcript) = mpc_tls.run().await?;

        info!("finished MPC-TLS");

@@ -207,10 +167,7 @@ impl Verifier<state::CommitAccepted> {

            debug!("finalizing mpc");

-            mux_fut
-                .poll_with(vm.finalize(&mut ctx))
-                .await
-                .map_err(VerifierError::mpc)?;
+            vm.finalize(&mut ctx).await.map_err(VerifierError::mpc)?;

            debug!("mpc finalized");
        }
@@ -232,9 +189,7 @@ impl Verifier<state::CommitAccepted> {
        )
        .map_err(VerifierError::zk)?;

-        mux_fut
-            .poll_with(vm.execute_all(&mut ctx).map_err(VerifierError::zk))
-            .await?;
+        vm.execute_all(&mut ctx).map_err(VerifierError::zk).await?;

        // Verify the tags.
        // After the verification, the entire TLS trancript becomes
@@ -244,10 +199,8 @@ impl Verifier<state::CommitAccepted> {
        Ok(Verifier {
            config: self.config,
            span: self.span,
+            ctx: Some(ctx),
            state: state::Committed {
-                mux_ctrl,
-                mux_fut,
-                ctx,
                vm,
                keys,
                tls_transcript,
@@ -264,11 +217,12 @@ impl Verifier<state::Committed> {

    /// Begins verification of statements from the prover.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
-    pub async fn verify(self) -> Result<Verifier<state::Verify>, VerifierError> {
+    pub async fn verify(mut self) -> Result<Verifier<state::Verify>, VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;
        let state::Committed {
-            mux_ctrl,
-            mut mux_fut,
-            mut ctx,
            vm,
            keys,
            tls_transcript,
@@ -278,17 +232,17 @@ impl Verifier<state::Committed> {
            request,
            handshake,
            transcript,
-        } = mux_fut
-            .poll_with(ctx.io_mut().expect_next().map_err(VerifierError::from))
+        } = ctx
+            .io_mut()
+            .expect_next()
+            .map_err(VerifierError::from)
            .await?;

        Ok(Verifier {
            config: self.config,
            span: self.span,
+            ctx: Some(ctx),
            state: state::Verify {
-                mux_ctrl,
-                mux_fut,
-                ctx,
                vm,
                keys,
                tls_transcript,
@@ -302,16 +256,6 @@ impl Verifier<state::Committed> {
    /// Closes the connection with the prover.
    #[instrument(parent = &self.span, level = "info", skip_all, err)]
    pub async fn close(self) -> Result<(), VerifierError> {
-        let state::Committed {
-            mux_ctrl, mux_fut, ..
-        } = self.state;
-
-        // Wait for the prover to correctly close the connection.
-        if !mux_fut.is_complete() {
-            mux_ctrl.close();
-            mux_fut.await?;
-        }
-
        Ok(())
    }
 }
@@ -324,12 +268,13 @@ impl Verifier<state::Verify> {

    /// Accepts the proving request.
    pub async fn accept(
-        self,
+        mut self,
    ) -> Result<(VerifierOutput, Verifier<state::Committed>), VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;
        let state::Verify {
-            mux_ctrl,
-            mut mux_fut,
-            mut ctx,
            mut vm,
            keys,
            tls_transcript,
@@ -338,33 +283,30 @@ impl Verifier<state::Verify> {
            transcript,
        } = self.state;

-        mux_fut.poll_with(ctx.io_mut().send(Response::ok())).await?;
+        ctx.io_mut().send(Response::ok()).await?;

        let cert_verifier =
            ServerCertVerifier::new(self.config.root_store()).map_err(VerifierError::config)?;

-        let output = mux_fut
-            .poll_with(verify::verify(
-                &mut ctx,
-                &mut vm,
-                &keys,
-                &cert_verifier,
-                &tls_transcript,
-                request,
-                handshake,
-                transcript,
-            ))
-            .await?;
+        let output = verify::verify(
+            &mut ctx,
+            &mut vm,
+            &keys,
+            &cert_verifier,
+            &tls_transcript,
+            request,
+            handshake,
+            transcript,
+        )
+        .await?;

        Ok((
            output,
            Verifier {
                config: self.config,
                span: self.span,
+                ctx: Some(ctx),
                state: state::Committed {
-                    mux_ctrl,
-                    mux_fut,
-                    ctx,
                    vm,
                    keys,
                    tls_transcript,
@@ -375,30 +317,27 @@ impl Verifier<state::Verify> {

    /// Rejects the proving request.
    pub async fn reject(
-        self,
+        mut self,
        msg: Option<&str>,
    ) -> Result<Verifier<state::Committed>, VerifierError> {
+        let mut ctx = self
+            .ctx
+            .take()
+            .ok_or_else(|| VerifierError::new(ErrorKind::Io, "context was dropped"))?;
        let state::Verify {
-            mux_ctrl,
-            mut mux_fut,
-            mut ctx,
            vm,
            keys,
            tls_transcript,
            ..
        } = self.state;

-        mux_fut
-            .poll_with(ctx.io_mut().send(Response::err(msg)))
-            .await?;
+        ctx.io_mut().send(Response::err(msg)).await?;

        Ok(Verifier {
            config: self.config,
            span: self.span,
+            ctx: Some(ctx),
            state: state::Committed {
-                mux_ctrl,
-                mux_fut,
-                ctx,
                vm,
                keys,
                tls_transcript,
--- a/crates/tlsn/src/verifier/error.rs
+++ b/crates/tlsn/src/verifier/error.rs
@@ -2,8 +2,6 @@ use std::{error::Error, fmt};

 use mpc_tls::MpcTlsError;

-use crate::transcript_internal::commit::encoding::EncodingError;
-
 /// Error for [`Verifier`](crate::verifier::Verifier).
 #[derive(Debug, thiserror::Error)]
 pub struct VerifierError {
@@ -12,7 +10,7 @@ pub struct VerifierError {
 }

 impl VerifierError {
-    fn new<E>(kind: ErrorKind, source: E) -> Self
+    pub(crate) fn new<E>(kind: ErrorKind, source: E) -> Self
    where
        E: Into<Box<dyn Error + Send + Sync + 'static>>,
    {
@@ -52,12 +50,11 @@ impl VerifierError {
 }

 #[derive(Debug)]
-enum ErrorKind {
+pub(crate) enum ErrorKind {
    Io,
    Config,
    Mpc,
    Zk,
-    Commit,
    Verify,
 }

@@ -70,7 +67,6 @@ impl fmt::Display for VerifierError {
            ErrorKind::Config => f.write_str("config error")?,
            ErrorKind::Mpc => f.write_str("mpc error")?,
            ErrorKind::Zk => f.write_str("zk error")?,
-            ErrorKind::Commit => f.write_str("commit error")?,
            ErrorKind::Verify => f.write_str("verification error")?,
        }

@@ -88,8 +84,8 @@ impl From<std::io::Error> for VerifierError {
    }
 }

-impl From<uid_mux::yamux::ConnectionError> for VerifierError {
-    fn from(e: uid_mux::yamux::ConnectionError) -> Self {
+impl From<tlsn_mux::ConnectionError> for VerifierError {
+    fn from(e: tlsn_mux::ConnectionError) -> Self {
        Self::new(ErrorKind::Io, e)
    }
 }
@@ -105,9 +101,3 @@ impl From<MpcTlsError> for VerifierError {
        Self::new(ErrorKind::Mpc, e)
    }
 }
-
-impl From<EncodingError> for VerifierError {
-    fn from(e: EncodingError) -> Self {
-        Self::new(ErrorKind::Commit, e)
-    }
-}
--- a/crates/tlsn/src/verifier/state.rs
+++ b/crates/tlsn/src/verifier/state.rs
@@ -2,9 +2,7 @@

 use std::sync::Arc;

-use crate::mux::{MuxControl, MuxFuture};
 use mpc_tls::{MpcTlsFollower, SessionKeys};
-use mpz_common::Context;
 use tlsn_core::{
    config::{prove::ProveRequest, tls_commit::TlsCommitRequest},
    connection::{HandshakeData, ServerName},
@@ -25,9 +23,6 @@ opaque_debug::implement!(Initialized);

 /// State after receiving protocol configuration from the prover.
 pub struct CommitStart {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
-    pub(crate) ctx: Context,
    pub(crate) request: TlsCommitRequest,
 }

@@ -36,8 +31,6 @@ opaque_debug::implement!(CommitStart);
 /// State after accepting the proposed TLS commitment protocol configuration and
 /// performing preprocessing.
 pub struct CommitAccepted {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
    pub(crate) mpc_tls: MpcTlsFollower,
    pub(crate) keys: SessionKeys,
    pub(crate) vm: Arc<Mutex<Deap<VerifierMpc, VerifierZk>>>,
@@ -47,9 +40,6 @@ opaque_debug::implement!(CommitAccepted);

 /// State after the TLS transcript has been committed.
 pub struct Committed {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
-    pub(crate) ctx: Context,
    pub(crate) vm: VerifierZk,
    pub(crate) keys: SessionKeys,
    pub(crate) tls_transcript: TlsTranscript,
@@ -59,9 +49,6 @@ opaque_debug::implement!(Committed);

 /// State after receiving a proving request.
 pub struct Verify {
-    pub(crate) mux_ctrl: MuxControl,
-    pub(crate) mux_fut: MuxFuture,
-    pub(crate) ctx: Context,
    pub(crate) vm: VerifierZk,
    pub(crate) keys: SessionKeys,
    pub(crate) tls_transcript: TlsTranscript,
--- a/crates/tlsn/src/verifier/verify.rs
+++ b/crates/tlsn/src/verifier/verify.rs
@@ -14,19 +14,12 @@ use tlsn_core::{
 };

 use crate::{
-    transcript_internal::{
-        TranscriptRefs,
-        auth::verify_plaintext,
-        commit::{
-            encoding::{self, KeyStore},
-            hash::verify_hash,
-        },
-    },
+    transcript_internal::{TranscriptRefs, auth::verify_plaintext, commit::hash::verify_hash},
    verifier::VerifierError,
 };

 #[allow(clippy::too_many_arguments)]
-pub(crate) async fn verify<T: Vm<Binary> + KeyStore + Send + Sync>(
+pub(crate) async fn verify<T: Vm<Binary> + Send + Sync>(
    ctx: &mut Context,
    vm: &mut T,
    keys: &SessionKeys,
@@ -94,11 +87,6 @@ pub(crate) async fn verify<T: Vm<Binary> + KeyStore + Send + Sync>(
                Direction::Sent => commit_sent.union_mut(idx),
                Direction::Received => commit_recv.union_mut(idx),
            });
-
-        if let Some((sent, recv)) = commit_config.encoding() {
-            commit_sent.union_mut(sent);
-            commit_recv.union_mut(recv);
-        }
    }

    let (sent_refs, sent_proof) = verify_plaintext(
@@ -151,24 +139,6 @@ pub(crate) async fn verify<T: Vm<Binary> + KeyStore + Send + Sync>(
    sent_proof.verify().map_err(VerifierError::verify)?;
    recv_proof.verify().map_err(VerifierError::verify)?;

-    let mut encoder_secret = None;
-    if let Some(commit_config) = request.transcript_commit()
-        && let Some((sent, recv)) = commit_config.encoding()
-    {
-        let sent_map = transcript_refs
-            .sent
-            .index(sent)
-            .expect("ranges were authenticated");
-        let recv_map = transcript_refs
-            .recv
-            .index(recv)
-            .expect("ranges were authenticated");
-
-        let (secret, commitment) = encoding::transfer(ctx, vm, &sent_map, &recv_map).await?;
-        encoder_secret = Some(secret);
-        transcript_commitments.push(TranscriptCommitment::Encoding(commitment));
-    }
-
    if let Some(hash_commitments) = hash_commitments {
        for commitment in hash_commitments.try_recv().map_err(VerifierError::verify)? {
            transcript_commitments.push(TranscriptCommitment::Hash(commitment));
@@ -178,7 +148,6 @@ pub(crate) async fn verify<T: Vm<Binary> + KeyStore + Send + Sync>(
    Ok(VerifierOutput {
        server_name,
        transcript: request.reveal().is_some().then_some(transcript),
-        encoder_secret,
        transcript_commitments,
    })
 }
--- a/crates/tlsn/tests/test.rs
+++ b/crates/tlsn/tests/test.rs
@@ -1,6 +1,6 @@
 use futures::{AsyncReadExt, AsyncWriteExt};
-use rangeset::set::RangeSet;
 use tlsn::{
+    Session,
    config::{
        prove::ProveConfig,
        prover::ProverConfig,
@@ -9,12 +9,9 @@ use tlsn::{
        verifier::VerifierConfig,
    },
    connection::ServerName,
-    hash::{HashAlgId, HashProvider},
+    hash::HashAlgId,
    prover::Prover,
-    transcript::{
-        Direction, Transcript, TranscriptCommitConfig, TranscriptCommitment,
-        TranscriptCommitmentKind, TranscriptSecret,
-    },
+    transcript::{Direction, Transcript, TranscriptCommitConfig, TranscriptCommitmentKind},
    verifier::{Verifier, VerifierOutput},
    webpki::{CertificateDer, RootCertStore},
 };
@@ -22,9 +19,7 @@ use tlsn_core::ProverOutput;
 use tlsn_server_fixture::bind;
 use tlsn_server_fixture_certs::{CA_CERT_DER, SERVER_DOMAIN};

-use tokio::io::{AsyncRead, AsyncWrite};
 use tokio_util::compat::TokioAsyncReadCompatExt;
-use tracing::instrument;

 // Maximum number of bytes that can be sent from prover to server
 const MAX_SENT_DATA: usize = 1 << 12;
@@ -41,9 +36,34 @@ async fn test() {
    tracing_subscriber::fmt::init();

    let (socket_0, socket_1) = tokio::io::duplex(2 << 23);
+    let mut session_p = Session::new(socket_0.compat());
+    let mut session_v = Session::new(socket_1.compat());

-    let ((full_transcript, prover_output), verifier_output) =
-        tokio::join!(prover(socket_0), verifier(socket_1));
+    let prover = session_p
+        .new_prover(ProverConfig::builder().build().unwrap())
+        .unwrap();
+    let verifier = session_v
+        .new_verifier(
+            VerifierConfig::builder()
+                .root_store(RootCertStore {
+                    roots: vec![CertificateDer(CA_CERT_DER.to_vec())],
+                })
+                .build()
+                .unwrap(),
+        )
+        .unwrap();
+
+    let (session_p_driver, session_p_handle) = session_p.split();
+    let (session_v_driver, session_v_handle) = session_v.split();
+
+    tokio::spawn(session_p_driver);
+    tokio::spawn(session_v_driver);
+
+    let ((_full_transcript, _prover_output), verifier_output) =
+        tokio::join!(run_prover(prover), run_verifier(verifier));
+
+    session_p_handle.close();
+    session_v_handle.close();

    let partial_transcript = verifier_output.transcript.unwrap();
    let ServerName::Dns(server_name) = verifier_output.server_name.unwrap();
@@ -58,61 +78,14 @@ async fn test() {
        partial_transcript.received_authed().iter().next().unwrap(),
        0..10
    );
-
-    let encoding_tree = prover_output
-        .transcript_secrets
-        .iter()
-        .find_map(|secret| {
-            if let TranscriptSecret::Encoding(tree) = secret {
-                Some(tree)
-            } else {
-                None
-            }
-        })
-        .unwrap();
-
-    let encoding_commitment = prover_output
-        .transcript_commitments
-        .iter()
-        .find_map(|commitment| {
-            if let TranscriptCommitment::Encoding(commitment) = commitment {
-                Some(commitment)
-            } else {
-                None
-            }
-        })
-        .unwrap();
-
-    let prove_sent = RangeSet::from(1..full_transcript.sent().len() - 1);
-    let prove_recv = RangeSet::from(1..full_transcript.received().len() - 1);
-    let idxs = [
-        (Direction::Sent, prove_sent.clone()),
-        (Direction::Received, prove_recv.clone()),
-    ];
-    let proof = encoding_tree.proof(idxs.iter()).unwrap();
-    let (auth_sent, auth_recv) = proof
-        .verify_with_provider(
-            &HashProvider::default(),
-            &verifier_output.encoder_secret.unwrap(),
-            encoding_commitment,
-            full_transcript.sent(),
-            full_transcript.received(),
-        )
-        .unwrap();
-
-    assert_eq!(auth_sent, prove_sent);
-    assert_eq!(auth_recv, prove_recv);
 }

-#[instrument(skip(verifier_socket))]
-async fn prover<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
-    verifier_socket: T,
-) -> (Transcript, ProverOutput) {
+async fn run_prover(prover: Prover) -> (Transcript, ProverOutput) {
    let (client_socket, server_socket) = tokio::io::duplex(2 << 16);

    let server_task = tokio::spawn(bind(server_socket.compat()));

-    let prover = Prover::new(ProverConfig::builder().build().unwrap())
+    let prover = prover
        .commit(
            TlsCommitConfig::builder()
                .protocol(
@@ -126,7 +99,6 @@ async fn prover<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
                )
                .build()
                .unwrap(),
-            verifier_socket.compat(),
        )
        .await
        .unwrap();
@@ -163,25 +135,21 @@ async fn prover<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(

    let mut builder = TranscriptCommitConfig::builder(prover.transcript());

-    for kind in [
-        TranscriptCommitmentKind::Encoding,
-        TranscriptCommitmentKind::Hash {
-            alg: HashAlgId::SHA256,
-        },
-    ] {
-        builder
-            .commit_with_kind(&(0..sent_tx_len), Direction::Sent, kind)
-            .unwrap();
-        builder
-            .commit_with_kind(&(0..recv_tx_len), Direction::Received, kind)
-            .unwrap();
-        builder
-            .commit_with_kind(&(1..sent_tx_len - 1), Direction::Sent, kind)
-            .unwrap();
-        builder
-            .commit_with_kind(&(1..recv_tx_len - 1), Direction::Received, kind)
-            .unwrap();
-    }
+    let kind = TranscriptCommitmentKind::Hash {
+        alg: HashAlgId::SHA256,
+    };
+    builder
+        .commit_with_kind(&(0..sent_tx_len), Direction::Sent, kind)
+        .unwrap();
+    builder
+        .commit_with_kind(&(0..recv_tx_len), Direction::Received, kind)
+        .unwrap();
+    builder
+        .commit_with_kind(&(1..sent_tx_len - 1), Direction::Sent, kind)
+        .unwrap();
+    builder
+        .commit_with_kind(&(1..recv_tx_len - 1), Direction::Received, kind)
+        .unwrap();

    let transcript_commit = builder.build().unwrap();

@@ -202,21 +170,9 @@ async fn prover<T: AsyncWrite + AsyncRead + Send + Unpin + 'static>(
    (transcript, output)
 }

-#[instrument(skip(socket))]
-async fn verifier<T: AsyncWrite + AsyncRead + Send + Sync + Unpin + 'static>(
-    socket: T,
-) -> VerifierOutput {
-    let verifier = Verifier::new(
-        VerifierConfig::builder()
-            .root_store(RootCertStore {
-                roots: vec![CertificateDer(CA_CERT_DER.to_vec())],
-            })
-            .build()
-            .unwrap(),
-    );
-
+async fn run_verifier(verifier: Verifier) -> VerifierOutput {
    let verifier = verifier
-        .commit(socket.compat())
+        .commit()
        .await
        .unwrap()
        .accept()
Author	SHA1	Message	Date
sinu	a780ac1136	wip	2026-01-13 11:06:12 -08:00
sinu	fc719c960f	wip	2026-01-13 10:12:05 -08:00
sinu.eth	1897f0d1e6	refactor: remove encoding commitment (#1071 ) * refactor: remove encoding commitment * remove unused field * clippy	2026-01-08 07:55:03 -08:00
dan	2101285f7f	chore(bench): dont bench large payloads (#1074 )	2026-01-05 09:55:35 +00:00
dan	98210e4059	chore(bench): added headed mode for debugging (#1073 )	2026-01-05 09:38:31 +00:00
dan	9dfac850d5	chore(harness): improve UX with progress bar, separate sweep benches (#1068 )	2025-12-23 13:59:14 +00:00
Hendrik Eeckhaut	b41d678829	build: update Rust to version 1.92.0	2025-12-16 09:36:11 +01:00
sinu.eth	1ebefa27d8	perf(core): fold instead of flatten (#1064 )	2025-12-11 06:41:26 -08:00
dan	4fe5c1defd	feat(harness): add reveal_all config (#1063 )	2025-12-09 12:01:39 +00:00
dan	0e8e547300	chore: adapt for rangeset 0.4 (#1058 )	2025-12-09 11:36:13 +00:00