Hyperplonk: Plonk with linear-time prover and high-degree custom gates
Plonk is a widely used succinct non-interactive proof system that uses univariate polynomial
commitments. Plonk is quite flexible: it supports circuits with low-degree “custom” gates as …
commitments. Plonk is quite flexible: it supports circuits with low-degree “custom” gates as …
Proofs, arguments, and zero-knowledge
J Thaler - Foundations and Trends® in Privacy and Security, 2022 - nowpublishers.com
Interactive proofs (IPs) and arguments are cryptographic protocols that enable an untrusted
prover to provide a guarantee that it performed a requested computation correctly …
prover to provide a guarantee that it performed a requested computation correctly …
Eos: Efficient Private Delegation of {zkSNARK} Provers
Succinct zero knowledge proofs (ie zkSNARKs) are powerful cryptographic tools that enable
a prover to convince a verifier that a given statement is true without revealing any additional …
a prover to convince a verifier that a given statement is true without revealing any additional …
Witness-succinct universally-composable snarks
Abstract Zero-knowledge Succinct Non-interactive ARguments of Knowledge (zkSNARKs)
are becoming an increasingly fundamental tool in many real-world applications where the …
are becoming an increasingly fundamental tool in many real-world applications where the …
{VeriZexe}: Decentralized Private Computation with Universal Setup
Traditional blockchain systems execute program state transitions on-chain, requiring each
network node participating in state-machine replication to re-compute every step of the …
network node participating in state-machine replication to re-compute every step of the …
SymmeProof: Compact zero-knowledge argument for blockchain confidential transactions
To reduce the transmission cost of blockchain confidential transactions, we propose
SymmeProof, a novel communication efficient non-interactive zero-knowledge range proof …
SymmeProof, a novel communication efficient non-interactive zero-knowledge range proof …
Baloo: nearly optimal lookup arguments
A Zapico, A Gabizon, D Khovratovich… - Cryptology ePrint …, 2022 - eprint.iacr.org
We present Baloo, the first protocol for lookup tables where the prover work is linear on the
amount of lookups and independent of the size of the table. Baloo is built over the lookup …
amount of lookups and independent of the size of the table. Baloo is built over the lookup …
Algebraic group model with oblivious sampling
In the algebraic group model (AGM), an adversary has to return with each group element a
linear representation with respect to input group elements. In many groups, it is easy to …
linear representation with respect to input group elements. In many groups, it is easy to …
Sumcheck arguments and their applications
We introduce a class of interactive protocols, which we call sumcheck arguments, that
establishes a novel connection between the sumcheck protocol (Lund et al. JACM 1992) …
establishes a novel connection between the sumcheck protocol (Lund et al. JACM 1992) …
Counting vampires: from univariate sumcheck to updatable ZK-SNARK
We propose a univariate sumcheck argument Count of essentially optimal communication
efficiency of one group element. While the previously most efficient univariate sumcheck …
efficiency of one group element. While the previously most efficient univariate sumcheck …