ZK Paper Reading Plan

Reasons and Purposes of this Plan

  • Papers of Zero Knowledge Proof are always very long and sometimes difficult to understand, which leads us to spend many days or even some weeks on reading one paper. Especially for some details of these papers, We usually cannot understand them very well immediately. All of the above situations will wear down our confidence in continuous reading. Therefore, we need this plan to record which papers we have read and which papers we need to read next, and to record our patience and the sense of accomplishment.

  • A good Paper Reading Plan help us organize the ideas and the relations of those papers. with the help of this plan, two or more persons can even read related different papers simultaneously base on some short comments which can be got easily from "Abstract" and "Introduction" sections in one paper . Therefore, this plan may shorten the reading cycle for our term.

  • Getting started with Zero Knowledge Proof is hard for freshmen. Records in this plan may help newcomers adapt to reading Zero Knowledge Proof papers and catch up with us.

Main Members:

魏成坤、陆涛、余瑞璟、李唯贤

Paper List

Main

Linear PCP
title publication content relations with other papers
LinearPCP CCC'07 + This paper present a new proof system (Linear PCP) in which the prover needs to provide a linear oracle that is not able to convince the verifier that a false statement is true.
+ This paper present how to construct a Linear PCP protocol based on Hadamard code and how to convert Linear PCP to Argument.
- Linear PCP based on Hademard code is not very efficient. The prover time is O($\s^2$), where s is the size of the circuit which is used for testing the validity of witness with respect to statement.
BCI+ and Groth is based on this work. the main idea of GGPR is the same as this paper even though it construct Arguments dirctly without using Linear PCP.
GGPR EUROCRYPT'13 ... ...
BCI+ TCC'13 ... ...
PGHR S&P‘13 ... ...
Groth EUROCRYPT'16 ... ...
BCGTV CRYPTO'13 ... ...
BCTV USENIX Security'14 ... ...
IOPs
title publication content relations with other papers
IPCP ICALP'07 ... ...
IOPs TCC'16 ... ...
Ligero CCS'17 ... ...
Aurora EUROCRYPT'18 ... ...
Fractal EUROCRYPT'20 ... ...
Virgo S&P'20 ... ...
Ligero++ CCS'20 ... ...
STARK1 unpublished ... ...
STARK2 CRYPTO'19 ... ...
Discrete Log
title publication content relations with other papers
BCCGP EUROCRYPT'16 ... ...
Bulletproof S&P'17 ... ...
... ...
IPs
title publication content relations with other papers
GKR JACM'15 ... ...
Hyrax S&P'18 ... ...
Libra CRYPTO'19 ... ...
Spartan CRYPTO'20 ... ...
... ...
CRS
title publication content relations with other papers
GKM+ CRYPTO'18 ... ...
Sonic CCS'19 ... ...
Plonk unpublished ... ...
Marlin EUROCRYPT'20 ... ...
SuperSonic EUROCRYPT'20 ... ...
... ...

Other

title publication content relations with other papers
LegoSNARK CCS'19 ... ...
SPARK EUROCRYPT'20 ... ...
ZKBoo USENIX Security'16 ... ...
DIZK USENIX Security'18 ... ...
BubbleRAM CCS'20 ... ...
... ...

Application

title publication content relations with other papers
zkDT CCS'20 ... ...
vCNN unpublished ... ...
zkCNN unpublished ... ...
ZEN unpublished ... ...
VeriML TPDS'21 ... ...

Familiarity rating

Level 0: Haven't read this paper, and don't understand what this paper does.

Level 1: Have read the "abstract" and "introduction" sections of this paper. Understand the motivation and targets of this paper.

Level 2: Have read "preliminaries" section of this paper. Comprehend all of the concepts mentioned in the "preliminaries" section.

Level 3: Understand main ideas of this paper and main methods used in this paper.

Level 4: Have read the whole paper. Understand almost everything in this paper including the proving process.

Level 5: Understand almost everything in this paper, and be able to do a presentation to other people.

Members reading

title 魏成坤 陆涛 余瑞璟 李唯贤
LegoSNARK Level 1 Level 3
zkDT Level 4
vCNN Level 3
zkCNN Level 2
ZEN
VeriML
SPARK Level 3 Level 3
GKR Level 2 Level 2
Libra
Spartan Level 3 Level 3
Virgo Level 3 Level 3
Ligero Level 3
DIZK Level 1 Level 3
ZKBoo Level 3 Level 3
Aurora Level 3
Ligero++
Groth Level 4
BCCGP
Bulletproof
STARK1
STARK2
BubbleRAM
LinearPCP Level 3
GGPR
BCI+ Level 3
PGHR
BCGTV
BCTV
IPCP
IOPs Level 3
Fractal
Hyrax
GKM+
Sonic
Plonk
Marlin
SuperSonic

Talk

  • No fixed time, just for better learning.

  • Serious, Limited to academic discussion.

  • Begin after two or more members are familiar with one paper (at least level 2).

  • Encourage every member to participate, but not mandatory.

Talk records

paper title members Content time
Linear PCP 陆涛、余瑞璟 Linear PCP与Arguments的区别在哪里?
Linear PCP与MIP的区别在哪里?
为什么说GGPR,Groth16都是基于LPCP的?
Linear PCP与传统PCP的区别在哪里?
为什么Linear PCP要先转成MIP再转到Arguments?
2021.8.12
BCI+ 陆涛、余瑞璟 论文的1.1节讲了一些什么内容?
论文的1.2节的动机讲了什么?
Linear PCP与 LIP有什么关系?
它们和Arguments有什么区别?
如何从k-query Linear PCP转化到LIP?
Input-oblivious LIPs中的two-message中的input-oblivious指的是什么?有什么用?
Public-Verifiable 与 Designated-Verifiable最大的区别是什么?
2021.8.16
Groth 魏成坤、陆涛、余瑞璟 NILP与LIP的关系是什么?
Disclosure-free的定义怎么理解?
Split NILP有什么用?
3.1节是如何证明协议是NILP的?
如何将NILP转化为Arguments?
2021.8.19
IOPs 陆涛、余瑞璟 2021.8.24