Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

zksnarks https://blog.ethereum.org/2016/12/05/zksnarks-in-a-nutshell/

Essentially let’s you verify computation is accurate without doing the computation yourself, and even treating the computation as a black box so you don’t know what is computed. Many applications in privacy, but also for outsourced computation.



One important weakness of zkSnarks is that it requires a trusted setup, for example [1]. A new alternative is called zk-STARK [2], which doesn't require the trusted setup, and is post-quantum secure. However, it significantly increases the size of the proof (around ~50KB). In general, hash-based post-quantum algorithms require bigger size and it would be interesting to watch the progress made in this regard.

[1]https://filecoin.io/blog/participate-in-our-trusted-setup-ce...

[2] https://eprint.iacr.org/2018/046.pdf


If I'm not mistaken, I believe they're found a way for a trustless setup a few months ago. Unfortunately I don't have any more info on hand, but I remember reading that in passing in regards to research performed by Ethereum developers.


I'm not up on the math, but https://electriccoin.co/blog/halo-recursive-proof-compositio... sounded like that sort of thing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: