So the main thing is, at least when your circuit is big and then other costs become negligible, your main cost is exactly computing. Well, first of all, you have to commit to what's called your witness polynomials. That you do in a regular plonk proof and you also do when you're just folding a plonk statement. In both cases, you need to commit to the witness poyllomials. And then what is an additional thing you need to do whenyou're folding? You need to compute and commit to the error terms. So that also requires something that's taking some time or that requires some work. What are you saving? The main
This week, Anna and Ariel Gabizon cover the SNARK trilogy; a history of pairing-based SNARKs in 3 acts. Starting from Jens Groth’s early works on SNARKs, Ariel takes us on a journey through key moments and breakthroughs in SNARKs over the last decade. They also dive into the emerging accumulation research on folding schemes and Ariel’s latest work surrounding lookup tables! This is an episode you won’t want to miss.
Here are some additional links for this episode:
Relevant Jens Groth Papers
PLONK-Relative Papers
Lookup-Relative Papers
Additional Resources
- Pinocchio: Nearly Practical Verifiable Computation by Parno, Howell, Gentry and Raykova
- Sonic: Zero-Knowledge SNARKs from Linear-Size Universal and Updateable Structured Reference Strings by Maller, Bowe, Kohlweiss, and Meiklejohn
- Perpetual Powers of Tau GitHub
- Delegating Computation: Interactive Proofs for Muggles by Goldwasser, Kalai and Rothblum
- Efficient Zero-Knowledge Arguments for Arithmetic Circuits in Discrete Log Setting by Bootle, Cerulli, Chaidos, Groth and Petit
- Nova: Recursive Zero-Knowledge Arguments from Folding Schemes by Kothapalli, Setty and Tzialla
- Episode 232: Cutting Edge ZK Research with Mary Maller
- ZK Whiteboard Sessions - Module Six: Lookup Tables for Performance Optimisation
Check out the ZK Jobs Board here: ZK Jobs.
Anoma’s first fractal instance Namada is launching soon!
Namada is a proof-of-stake L1 for interchain asset-agnostic privacy. Namada natively interoperates with fast-finality chains via IBC and with Ethereum via a trustless two-way bridge.
Follow Namada on twitter @namada for more information and join the community on Discord discord.gg/namada.
If you like what we do: