Questions tagged [starks]
The starks tag has no usage guidance.
9
questions
1
vote
1
answer
65
views
Why are zk-STARK quantum secure?
I have a rough idea of how STARK work, but I want to know which part makes them quantum secure. Is it because when the prover generates the proof they use the random number from the Merkle root, which ...
- 11
2
votes
1
answer
198
views
Is the STARK Curve a SafeCurve?
SafeCurves defines criterias for choosing safe curves in elliptic-curve cryptography.
STARK Curve defines a Stark-friendly elliptic curve that can be used with ECDSA.
I was wondering: Is the STARK ...
- 407
1
vote
1
answer
92
views
Why Zk-SNARKs are Argument of Knowledge if a Knowledge Extractor exists?
From what I know, proving the existance of a Knowledge Extractor implies perfect soundness.
So why in zk-SNARKs (and similar) we talk about Arguments of Knowledge, where the soundness property is only ...
- 101
0
votes
0
answers
56
views
Are zk-STARKs a Sigma protocol? Is the communication interactive? And other doubts
I've heard that STARKS are not a non-interactive protocol, if so:
What is (briefly) the mechanism they use to operate?
Can they be considered a Sigma protocol?
Why SNARKs are not interactive, instead?...
- 101
2
votes
0
answers
98
views
It is possible to verify the computation of a hash function without actually proving it in zero knowledge?
Let me first introduce the context: Let's say that we have a hash function evaluation: $$h = H(x, y),$$ where $x$ and $y$ are the public and the private input of the hash function $H$, respectively.
...
- 511
6
votes
1
answer
622
views
Why invent new hash functions for zero-knowledge proofs?
Recently, new hash functions were invented. Their primary purpose is serving the needs of zero-knowledge proof systems. I'm talking about Poseidon-256, Starkad-256, etc. See the paper.
What is the ...
- 229
1
vote
1
answer
144
views
Linear combination IOP for SNARK registers
The STARK paper says
Our ZK-STARK uses a separate Reed-Solomon codeword for each register, leading to w many codewords, each of lower degree ...
- 387
4
votes
1
answer
213
views
Transparent Setup of SNARKs
The STARKs paper states
Third, and most important, ZK-PCPs are transparent (or “public
randomness” ), which means that the randomness used by the verifier is
public; in particular, setting up a ...
- 1,006
2
votes
0
answers
49
views
Assumptions underlying the soundness of STARKs
STARKs have recently received quite a lot of attention due to their small proof size and supposedly simple assumptions.
The paper introduction itself seems to mainly state that their construction is ...
- 1,006