Head of Ecosystem at Aztec

Writing stuff occasionally at mirror.xyz/brunny.eth

What are your thoughts on post quantum-ifying plonkish type proof systems? What seems the most promising path towards constant proof sizes in that direction?

I think they are a great and necessary direction. Plonkish crypto with FRI is already quantum-proof if done correctly.

Constant proof sizes with post-quantum crypto is an extremely hard problem, it might even be impossible. Hopefully we can improve on the state of the art soon.

CEO @aztecnetwork. Building a privacy-first L2 on Ethereum. Cryptographer, software engineer, ex-particle physicist. Plonk co-author. Huff inventor.

hey sorry what do you mean plonkish crypto with FRI? What’s the difference between normal FRI and plonkish FRI? custom gates? ty

beep beep boop beep 
🌱🏂🚵‍♀️👸

I think zac is talking about fflonk here. My understanding is it's plonk but ripping out KZG and replacing it with FRI for polynomial commitments

Interested in ZK, FHE, PUFs, hardware, system design, ai safety, and smart contact security.

This is what zkEVM does for the snarks it delivers to L1.

They also have a pretty low validation cost (183k gas iirc)