CEO @aztecnetwork. Building a privacy-first L2 on Ethereum. Cryptographer, software engineer, ex-particle physicist. Plonk co-author. Huff inventor.

The first AMA on the zk channel will be this Thursday, Feb 8, at 17:00 GMT. 

@zac-aztec of PLONK / Aztec fame will be answering questions. Fun fact, Zac was a particle physicist at CERN before becoming a self-taught cryptographer 

reply with questions below, Zac will pick the best ones to answer on Thursday ⬇️


COO @ Pluto |||

Writing stuff occasionally at mirror.xyz/brunny.eth |||

Previously Head of Ecosystem at Aztec Labs

This one is longer, I had a HIGH LEVEL idea on how to improve proving speeds. It’s simple

Assume we have a ZKP scheme with a tunable parameter for the security strength.

Where:

High security -> Slow
Low security -> Fast

We can tune the parameter to be faster, and curb the security by measuring proving duration…

Working on building zkTLS infra/products. A ruthless empiricist and meme connoisseur.

http://opacity.network

Duration + commit/reveal + attempts:

Imagine we have a ledger w/ a simple contract.

1. Prover starts new proof by committing what they want to prove, and is returned a random value (clock starts)

2. Prover generates proof using random val

3. Prover submits proof where it is verified (zkp, commitment, duration)

…

Last cast.

The proof is assumed to have failed unless the user can provide a successful proof for what was committed.

So if someone is making too many proof requests or failures, then the protocol can reject it outright.

——

Under my assumptions i think this would work.

A considering pursing this path. Wdyt?

Last thought, the way to monetize this is a bit more clear because of the use of a ledger :)

This a fundamentally new type of ZKP scheme. Using weak numbers to make the point

Let’s say that with 10sec, you had a 0.01% of forging a proof. If I can prove it took 2s to do it, then you may accept the proof as valid

To increase our overall security guarantees we can also incorporate a way to track attempts….

Builder, Burner, Artist, Guy
Co-founder, Ex-CEO @ risczero.com

Interesting, at least the idea has legs.

I have a few ideas around this, but won’t have the time to go deep into it for awhile.

I’m going to hunt down this talk, thanks!

I actually talked about this at zkSummit 9! The annoying thing is that, at least for STARKs, you don't have as many useful levers as you might like. You can end up with 50 bits of security instead of 100 and only gain a 2x speedup - still, it's a really promising idea in my mind.