Discussions about zero knowledge proofs, related cryptography and its applications.

Main

we’ve reached a level of polarization where it’s radical to give someone else the benefit of the doubt 

this is prime real estate for the privacy conversation

In July, 100 students engaged with DAVINCI.vote, our zkRollup for voting, at the University of Zurich's International Summer School. 

👀 We love to collaborate with the academia; stay tuned because the DAVINCI research paper is just around the corner!

1/  We made verifiable AI (zkML) 3-7x faster than everyone else! Here's how. 

We asked a simple question. What if we modified a16z Crypto's sumcheck based &amp; lookup-centric zkVM "JOLT" for ML operations?👇🧵

Cross cast on some recent work we did.

https://x.com/wyatt_benno/status/1959935724083417271

one year ago JOLT had a 500k times overhead for proving a RISC-V program when compared to running the same program but without proving its execution. that overhead is now reduced to 100k

1/ Jolt just got a 6× speedup. We now prove over 1,000,000 RISC-V cycles/sec on a 32-core CPU and over 500,000 cycles/sec on a MacBook, with proofs of about 50 KB. Here’s what’s new 🧵

What if:
1. Writes private circuit in Noir
2. Verifies Noir proof in zkVM
👀

Founders/Builders: If you had to choose a zkVM today, what’s your pick and the one killer reason (throughput, cost, DX, roadmap, security model)?

Links welcome.

What example made the concept of ZKP "click" for you?

The Ali Baba cave? Find waldo? What's your go-to explanation?

Amazing to see so many major L2s now at stage 1.

https://x.com/l2beat/status/1953017350606803416

The next goal we should shoot for is, in my view, fast (<1h) withdrawal times, enabled by validity (aka ZK) proof systems.

I consider this even more important than stage 2.

Fast withdrawal times are important because waiting a week to withdraw is simply far too long for people, and even for intent-based bridging (eg. ERC-7683), the cost of capital becomes too high if the liquidity provider has to wait a week. This creates large incentives to instead use solutions with unacceptable trust assumptions (eg. multisigs/MPC) that undermine the whole point of having L2s instead of fully independent L1s.

If we can reduce native withdrawal times to under 1h short term, and 12s medium term, then we can further cement the Ethereum L1 as the default place to issue assets, and the economic center of the Ethereum ecosystem.

vitalik says more zk 🗣️ https://farcaster.xyz/vitalik.eth/0x9e6f596b

Is it possible to accelerate zk proofs using GPUs?

Multi-scalar multiplication/computing linear combinations of elliptic curve points — that can clearly be done with GPUs?

So long as you get the circuit inputs over API or onchain, proof generation is a bit slower but MSM should be nearly instant.

Global-Scale Secure MPC

Using this protocol in zkTLS, you can achieve security even when the majority of notaries are dishonest/malicious. 

https://eprint.iacr.org/2017/189.pdf

Any ZK researchers here? Curious to hear about ZK location to maintain user's privacy

Working on a POC for an iOS mobile app