This repository is an encyclopedia of Zero Knowledge Proof. Zero Knowledge Proof (ZKP) is a special family of Verifiable Computing (VC) which has an extra property called Zero Knowledge, actually. It has been proved that any VC system can be converted into a zero-knowledge version additionally. So it is important for researchers to learn VC system as well. The repository records the basic concepts of VC and ZKP, and a series of important articles and books in these areas (which are classical or novel achievements from a aspect of academic), along with some actual applications in various scienarios as well.
The repository is also for recording my personal researches in Verifiable Computing and Zero Knowledge Proof area.
We'd like to collect other awesome materials as well, if they are related. Any useful revisions and pull requests (PR) are welcomed!
What's Zero Knowledge Proof? And what does zk-SNARKs, zk-STARK... mean? What about interactive proofs and non-interactive proofs? Here gives an overview of these "profound" terms.
These are some important technique terms (or, preliminaries, in a researcher's tongue) that may be learned before diving into this area. Some of the terms may appear during the journey as well.
-
- Polynomial Commitment
- Vector Commitment
-
Probabilistically Checkable Proof (PCP)
-
Bilinear Paring
-
Quadratic Span Program (QSP), Quadratic Arithmetic Program (QAP)
Articles and books of awesome and beautiful implementations that introduce ZK argument systems and other cryptography primitives in recent years.
Parts of the contents are inspired by the below graph from a speech given by Yupeng, Zhang.
- The knowledge complexity of interactive proof-systems
- The concept of interactive proof is introduced. And the distinction between public coin and private coin (whether the verifier’s randomness is open/visible to the prover) is proved to be not crucial in the follow works.
- Give an argument system that proof consists of 8 group elements and the verification cost of the verifier is some exponentiations and checking pairing product equation of 6 pairings.
- How to prove yourself: Practical solutions to identification and signature problems
- Delegating Computation: Interactive Proofs for Muggles
- This work have 2 different version, one in STOC08, the other in JACM15.
- vSQL: Verifying Arbitrary SQL Queries over Dynamic Outsourced Databases
- This paper combines GKR(CMT) protocol with KZG polynomial commitment together. That obtains a succinct interactive proof system allows for any size of inputs and high proving efficiency. This protocol is applied to a verifiable database scenario for verifying arbitrary SQL query against probably malicious server.
- Multilinear extension and its compositional property.
- A zero-knowledge version: A zero-knowledge version of vSQL.
- Doubly-Efficient zkSNARKs Without Trusted Setup
- Doubly-Efficient: Means efficiency for both the prover and the verifier.
These protocols are designed based on the bilinear pairing assumption. And they are non-interactive proof systems.
- Quadratic Span Programs and Succinct NIZKs without PCPs
- Found an insightful construction of polynomial equations based on Lagrange interpolation polynomials yielding a pairing-based NIZK argument with a CRS size proportional to the size of the statement and witness.
- Pinocchio: nearly practical verifiable computation
- Give an argument system that proof consists of 8 group elements and the verification cost of the verifier is some exponentiations and checking pairing product equation of 6 pairings.
- Scalable, transparent, and post-quantum secure computational integrity
- Succinct Non-Interactive Zero Knowledge for a von Neumann Architecture
- On the Size of Pairing-Based Non-interactive Arguments
- A beautiful proof for the notions: completeness, soundness and zero knowledge, which is worth learning for researchers.
- Give an argument system for arithmetic circuit where a proof consists of only 3 group elements. And the verifier just needs to compute a number of exponentiations proportional to the statement size and check a single pairing product equation, which only has 3 pairings.
To be finished.
__
To be finished.