Questions tagged [snarks]
The snarks tag has no usage guidance.
6
questions
4
votes
2answers
72 views
Can zksnark prove DLP?
Can one use zksnark to prove the knowledge of a discrete logarithm? In another word, can zksnark (R1CS) encode exponentiation?
5
votes
1answer
115 views
Why invent new hash functions for zero-knowledge proofs?
Recently, new hash functions were invented. Their primary purpose is serving the needs of zero-knowledge proof systems. I'm talking about Poseidon-256, Starkad-256, etc. See the paper.
What is the ...
0
votes
1answer
34 views
Examples of flattening code to create an R1CS
When preparing logic for use in a zkSnark, one needs to first "flatten" the code so it can be written as a series of constraints.
I'm finding it hard to find examples of doing this. For instance, how ...
0
votes
0answers
31 views
Converting R1CS to QAP - checking the last step
from reading Vitalik Buterin's excellent post on creating a QAP from an R1CS, I understood to translate a function into three groups of vectors, the number of vectors being the number of "gates" or ...
0
votes
1answer
34 views
Is security of zk-SNARKS related to the size of the arithmetic circuit they evaluate?
In the context of zk-SNARKS, we are given an arithmetic circuit $C$, public outputs $y_1, \ldots, y_n = \mathbf{y}$ and some public inputs $x_1, \ldots, x_ℓ$. The prover wants to prove knowledge of ...
0
votes
0answers
39 views
How to encode SHA-256 as a quadratic span program?
I'm trying to understand the step-by-step zkSNARK's generation process for proving the knowledge of the hash pre-image (as in this example). However, I don't understand how exactly SHA-256 is turned ...
