Multilinear maps

A cryptographic multilinear map generalizes a bilinear pairing to a k-way map e: G_1 x … x G_k → G_T that is linear in each argument and on which discrete-log-type problems are conjectured hard; the known candidates are graded encodings, and they underlie the first iO candidate (GGHRSW13).

TODO: syntax and security definition.