「Cryptography-ZKP」: Lec7 Poly-commit based on ECC

In this series, I will learn Zero Knowledge Proofs (ZKP) on this MOOC, lectured by Dan Boneh, Shafi Goldwasser, Dawn Song, Justin Thaler and Yupeng Zhang.
Any corrections and advice are welcome. ^ - ^

Topics:

  • Poly-commit based on Error-correcting Codes
  • Argument for Vector-Matrix Product
    • Proximity Test
    • Consistency Test
  • Linear-time encodable code based on expanders
    • Lossless Expander
    • Recursive Encoding with constant relative distance

「Cryptography-ZKP」: Lec6 Poly-commit based on Pairing and Discret-log

In this series, I will learn Zero Knowledge Proofs (ZKP) on this MOOC, lectured by Dan Boneh, Shafi Goldwasser, Dawn Song, Justin Thaler and Yupeng Zhang.
Any corrections and advice are welcome. ^ - ^

Topics:

  • KZG poly-commit based on bilinear pairing
    • KZG scheme
    • Powers-of-tau Ceremony
    • Security Analysis
    • Knowledge of exponent assumption
    • Variants: multivariate; ZK; batch openings
  • Bulletproofs poly-commit based on discrete logarithm

「Cryptography-ZKP」: Lec5-The Plonk SNARK

In this series, I will learn Zero Knowledge Proofs (ZKP) on this MOOC, lectured by Dan Boneh, Shafi Goldwasser, Dawn Song, Justin Thaler and Yupeng Zhang.
Any corrections and advice are welcome. ^ - ^

Topics:

  • Preprocessing SNARK
  • KZG Poly-Commit Scheme
  • Proving Properties of committed polys
    • ZeroTest
    • Product Check
    • Permutation Check
    • Prescribed Permutation Check
  • Plonk IOP for General Circuits

「Cryptography-ZKP」: Lec4-SNARKs via IP

In this series, I will learn Zero Knowledge Proofs (ZKP) on this MOOC, lectured by Dan Boneh, Shafi Goldwasser, Dawn Song, Justin Thaler and Yupeng Zhang.
Any corrections and advice are welcome. ^ - ^

Topics:

  • Differences between Interactive Proofs and SNARKs
  • Outline of SNARKs from IP
  • Brief intro to Functional Commitments
  • SZDL Lemma
  • Multilinear Extensions
  • Sum-check Protocol and its application.
    • Counting Triangles
    • SNARK for Circuit-satisfiability