Questions tagged [snarks]
The snarks tag has no usage guidance.
8
questions
0
votes
0answers
23 views
two-to-one hash in libsnark, what is it “exactly”?
I'm reviewing this test which prepares a zero knowledge proof of the preimage of an hash:
https://github.com/mariogemoll/libsnark-tutorial/blob/sha256/src/test-knowledge-of-preimage.cpp
In my (wrong) ...
1
vote
0answers
28 views
Fixed variable in Groth16
In the paper On the Size of Pairing-based Non-interactive Arguments by Jens Groth, it is always referred in the equations to satisfy that $a_0 = 1$ and the others $a_1, ..., a_m \in \mathbb{F}$.
I am ...
4
votes
2answers
84 views
Can zksnark prove DLP?
Can one use zksnark to prove the knowledge of a discrete logarithm? In another word, can zksnark (R1CS) encode exponentiation?
5
votes
1answer
137 views
Why invent new hash functions for zero-knowledge proofs?
Recently, new hash functions were invented. Their primary purpose is serving the needs of zero-knowledge proof systems. I'm talking about Poseidon-256, Starkad-256, etc. See the paper.
What is the ...
0
votes
1answer
45 views
Examples of flattening code to create an R1CS
When preparing logic for use in a zkSnark, one needs to first "flatten" the code so it can be written as a series of constraints.
I'm finding it hard to find examples of doing this. For instance, how ...
0
votes
0answers
53 views
Converting R1CS to QAP - checking the last step
from reading Vitalik Buterin's excellent post on creating a QAP from an R1CS, I understood to translate a function into three groups of vectors, the number of vectors being the number of "gates" or ...
0
votes
1answer
41 views
Is security of zk-SNARKS related to the size of the arithmetic circuit they evaluate?
In the context of zk-SNARKS, we are given an arithmetic circuit $C$, public outputs $y_1, \ldots, y_n = \mathbf{y}$ and some public inputs $x_1, \ldots, x_ℓ$. The prover wants to prove knowledge of ...
0
votes
0answers
45 views
How to encode SHA-256 as a quadratic span program?
I'm trying to understand the step-by-step zkSNARK's generation process for proving the knowledge of the hash pre-image (as in this example). However, I don't understand how exactly SHA-256 is turned ...
