0
$\begingroup$

I have on more than one instance come across statements which suggest that zero-knowledge proofs are not practical. One example is: "Our theoretical constructions use zero-knowledge proofs, and therefore they do not suggest a practical way of implementing a pseudonym system." from the paper Pseudonym Systems.

What is the basis for this? Is it a caution which was common in the past which is now obsolete? I can think of recent systems, e.g. Z-cash, which uses zero-knowledge proofs in practice.

Improve this question
$\endgroup$
3
  • $\begingroup$ My fifty cents of the contribution could be: take a look at The Complexity of Zero Knowledge, by Salil Vadhan. $\endgroup$
    – Crypto Learner
    Sep 25, 2019 at 20:19
  • $\begingroup$ The paper you are referencing is 20 years old. There has been quite some progress in the meantime :) $\endgroup$
    – DrLecter
    Sep 25, 2019 at 21:48
  • $\begingroup$ @DrLecter, that's really true! In fact, I was unable to point where is a good start-point... $\endgroup$
    – Crypto Learner
    Sep 26, 2019 at 19:18

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.