Scalable Zero Knowledge with No Trusted Setup

Ben–Sasson, Eli; Bentov, Iddo; Horesh, Yinon; Riabzev, Michael

doi:10.1007/978-3-030-26954-8_23

Cited by 136 publications

(60 citation statements)

References 60 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This could be significantly improved by storing and verifying only short correctness proofs on a blockchain and distributing the larger, plaintext data on another layer to the relevant participants. In particular, SNARKS, STARKS, and other (Zero-Knowledge-)Proofs of computational integrity which require much less verification and communication overhead on-chain seem very promising (Ben-Sasson et al 2019). This is because, unlike methods that lower the degree of redundancy, these do likely not have a negative impact on security because every transaction is still verified by every node.…”

Section: Closing Notes On the Energy Consumption Of Pow Blockchainsmentioning

confidence: 99%

The Energy Consumption of Blockchain Technology: Beyond Myth

et al. 2020

View full text Add to dashboard Cite

When talking about blockchain technology in academia, business, and society, frequently generalizations are still heared about its-supposedly inherent-enormous energy consumption. This perception inevitably raises concerns about the further adoption of blockchain technology, a fact that inhibits rapid uptake of what is widely considered to be a groundbreaking and disruptive innovation. However, blockchain technology is far from homogeneous, meaning that blanket statements about its energy consumption should be reviewed with care. The article is meant to bring clarity to the topic in a holistic fashion, looking beyond claims regarding the energy consumption of Bitcoin, which have, so far, dominated the discussion.

show abstract

Section: Closing Notes On the Energy Consumption Of Pow Blockchainsmentioning

confidence: 99%

The Energy Consumption of Blockchain Technology: Beyond Myth

et al. 2020

View full text Add to dashboard Cite

show abstract

“…Such a trusted setup can be executed by a set of parties in a distributed protocol where at most one party needs to be honest [16]. Designing an efficient proof machinery without trusted setup is a topic of ongoing research [13,31,72,82]; we plan to explore such a proof machinery in Piperine in the future.…”

Section: Discussionmentioning

confidence: 99%

“…However, for a client to construct such Merkle proofs, the prover must be modified to produce a list of state changes during transaction execution and those changes must be persisted reliably (e.g., as in Piperine). In terms of mechanisms, Piperine relies on the Groth16 proof system [47] for proof generation and on set data structures for state, whereas StarkDEX and StarkPay use zkSTARKs [13] and Merkle trees, respectively. Prior performance reports [73,82,87] show that both mechanisms employed by Piperine achieve significantly lower costs for the prover.…”

Section: Related Workmentioning

confidence: 99%

Replicated state machines without replicated execution

Nikitin

Setty

2020

2020 IEEE Symposium on Security and Privacy (SP)

View full text Add to dashboard Cite

This paper introduces a new approach to reduce end-to-end costs in large-scale replicated systems built under a Byzantine fault model. Specifically, our approach transforms a given replicated state machine (RSM) to another RSM where nodes incur lower costs by delegating state machine execution: an untrusted prover produces succinct cryptographic proofs of correct state transitions along with state changes, which nodes in the transformed RSM verify and apply respectively. To realize our approach, we build Piperine, a system that makes the proof machinery profitable in the context of RSMs. Specifically, Piperine reduces the costs of both proving and verifying the correctness of state machine execution while retaining liveness-a distinctive requirement in the context of RSMs. Our experimental evaluation demonstrates that, for a payment service, employing Piperine is more profitable than naive reexecution of transactions as long as there are > 10 4 nodes. When we apply Piperine to ERC-20 transactions in Ethereum (a real-world RSM with up to 10 5 nodes), it reduces per-transaction costs by 5.4× and network costs by 2.7×.

show abstract

“…SCI has been implemented in practice and measurements on its performance can be found in [94]. 2) STARK is an improvement on SCI [97]…”

Section: Zero-knowledge Based On Probabilistically Checkable Proofsmentioning

confidence: 99%

Non-Interactive Zero-Knowledge for Blockchain: A Survey

2020

View full text Add to dashboard Cite

We survey the state-of-the-art non-interactive zero-knowledge argument schemes and their applications in confidential transactions and private smart contracts on blockchain. The main goal of this paper is to serve as a reference for blockchain application developers in finding the most suitable scheme for a particular use case. We give an overview and compare the state-of-the-art protocols for confidential transactions and private smart contracts regarding the protection of the transaction graph and amounts, data and functionality. However, our main focus is on state-of-the-art zero-knowledge argument schemes. We briefly describe their backgrounds, proof lengths and computational complexities and discuss their cryptographic security models. Our focus is on seminal, otherwise notable and, especially, implemented methods that are ready to be applied in practice. We also survey the existing implementations of transforming computations into circuit representations required by those methods. We note that the existing schemes have different strengths and drawbacks regarding usability, setup, proof length and proving and verification costs.

show abstract

Scalable Zero Knowledge with No Trusted Setup

Cited by 136 publications

References 60 publications

The Energy Consumption of Blockchain Technology: Beyond Myth

The Energy Consumption of Blockchain Technology: Beyond Myth

Replicated state machines without replicated execution

Non-Interactive Zero-Knowledge for Blockchain: A Survey

Contact Info

Product

Resources

About