I have on more than one instance come across statements which suggest that zero-knowledge proofs are not practical. One example is: "Our theoretical constructions use zero-knowledge proofs, and therefore they do not suggest a practical way of implementing a pseudonym system." from the paper Pseudonym Systems.

What is the basis for this? Is it a caution which was common in the past which is now obsolete? I can think of recent systems, e.g. Z-cash, which uses zero-knowledge proofs in practice.

  • $\begingroup$ My fifty cents of the contribution could be: take a look at The Complexity of Zero Knowledge, by Salil Vadhan. $\endgroup$ Commented Sep 25, 2019 at 20:19
  • $\begingroup$ The paper you are referencing is 20 years old. There has been quite some progress in the meantime :) $\endgroup$
    – DrLecter
    Commented Sep 25, 2019 at 21:48
  • $\begingroup$ @DrLecter, that's really true! In fact, I was unable to point where is a good start-point... $\endgroup$ Commented Sep 26, 2019 at 19:18


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.