There seem to be many ways of verifying computation, and many classes of interactive proof systems which aren't ZK.

That being said, most "validity proofs" in blockchain (which seems to be the largest consumer of this tech) are based on ZK proofs. Is this a coincidence (e.g. zk-SNARKs showed up in the right place at the right time) or is there a good reason?

My best guesses:

  • It's inefficient to transmit information about the input if you don't have to?
  • Efficient interactive proofs are simulatable?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.