Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

# Questions tagged [zero-knowledge-proofs]

Zero-knowledge proofs are an interactive method for one party to prove to another that a statement is true, without revealing anything other than the veracity of the statement.

1,061 questions
Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

### question about zk-snark

I have some questions about zk-SNARKS while reading the article "Why and How zk-SNARK Works: Definitive Explanation" by Maksym Petkus. My questions are as follows: on page 59, could you ...
2 votes
0 answers
39 views

• 2,235
0 votes
0 answers
25 views

### Implement true serverless (decentralized) online multiplayer game with cryptography

TLDR, this will be a discussion rather than my private problem. Nowadays, most game developers or publishers have central servers to manage player transactions such as movement, mouse position, and so ...
0 votes
1 answer
56 views

### ZK is not preserved under parallel composition! - Witness Indistinguishability

Referring to an old but very nice paper on Witness Indistinguishability and Witness Hiding (link). On page 4, in theorem 3.2, the author explained it in three points, but I have few queries. In point ...
• 287
1 vote
1 answer
97 views

• 131
0 votes
0 answers
38 views

### Constraints needed to express a + b + c = d in zkp circuit

I am writing an ECC based zkp circuit and need to express the constraints: a + b + c = d a, b, c, d >= 0 a, b, c, d will be represented by points on the curve so addition can wrap around the ...
• 101
1 vote
0 answers
71 views

### Efficiency of interactive versus non-interactive zero-knowledge proofs?

Some projects (e.g., https://zkpass.org/) are claiming that interactive ZKPs can be more efficient than non-interactive ZKPs. What is the rationale behind this?
• 655
0 votes
0 answers
39 views

### Showing the zero-knowledge property in a NI-ZK scheme

To my understanding, whilst the definition of zero-knowledge (zk) is the same in the non-interactive context, how one shows a non-interactive scheme is zk is very different from interactive zk ...
0 votes
1 answer
54 views

### Can Cryptographic Proofs Directly Attest to Function Call Results?

In systems where computations are performed in remote or potentially untrusted environments(e.g. Ethereum NaaS providers such as Infura), how can we gain confidence in the accuracy of the results? ...
• 101
0 votes
0 answers
28 views

### Obfuscation scheme wanted

I'd like to know if there's any cryptographic scheme that implements something similar to what I'm summarizing here below. Thanks a lot for reading and for any hint or question. Intro-Scenery: There's ...
• 101
2 votes
0 answers
65 views

### How does Fast Reed-Solomon Interactive Oracle Proof (FRI) protocol work using polynomial commitments in zk-STARKs?

Over a few days, I have been trying to understand the FRI protocol discussed in the link https://aszepieniec.github.io/stark-anatomy/fri . It explains Fast Reed-Solomon Interactive Oracle Proof (FRI) ...
0 votes
1 answer
99 views

• 121
0 votes
2 answers
118 views

### which zero knowledge proof technique is suitable for identity verification system?

I am a beginner in the cryptographic field but as a graduation project, I have to build an identity verification and management system using zero-knowledge proofs. I see a lot of zkp techniques, ...
1 vote
0 answers
75 views

### Zero Knowledge 3-coloring, but we allow malicious V to challenge two edges

So I think I understand how zero knowledge protocol with 3-coloring is supposed to work. But in an attempt to increase soundness of the protocol, we allow the verifier V to challenge two edges per ...
0 votes
0 answers
38 views

### How can I determine if the result of subtracting two Pedersen commitments is negative or positive?

I'm using Pedersen commitments to maintain the account balance in the ledger. Assume that when I create the account, I record the Pedersen commitment of 0 in a ledger (here, the blinding factor and ...
2 votes
1 answer
135 views

### Use zk-STARK for post-quantum signature scheme?

Could you not use zk-STARK for a post-quantum signature scheme? Your private key is a random symmetric encryption key, your public key is the hash of the encryption key. To sign you run an algorithm ...
1 vote
0 answers
28 views

### How to convert Lattice based signature to R1CS statements?

How can we convert a lattice-based signature (like based on Fiat Shmair with abort e.g. Dilithium) to R1CS?