A zero-knowledge proof is a method by which the prover can show the verifier that a given predicate is true without revealing the content of the predicate.
Questions tagged [zero-knowledge]
15 questions
2
votes
0 answers
How private shilded transactions to payee address works in ZeroCash from the information point of view?
In ZeroCash they perform transactions like this. I want to unravel and understand how z-addresses work in ZCash. It shall be described simply in here and in-depth, revised here and here (older, a bit simpler). Simply put it shall be described…
Blender
- 141
- 7
2
votes
0 answers
zk-SNARKs vs. Zk-STARKs vs. BulletProofs? (Updated)
zk-SNARKs, Zk-STARKs and BulletProofs are three major zero knowledge proofs to provide privacy for the blockchain technology.
If we can compare them,
(1) Bulletproofs and Zk-STARKs require no trusted setup.
Unlike zk-SNARKs that requires a…
Questioner
- 1,151
- 8
- 22
2
votes
0 answers
Zero-knowledge/Arthur-Merlin Proof-of-Work for NP-like problems with coin flips hashes of recent transactions
On a previous answer to a question about making proof-of-work more useful, two challenges were provided:
"1. The work must be much, much easier to verify than to do, and
2. The work must in fact secure the transactions and not be severable from…
Mark S
- 121
- 4
2
votes
1 answer
What are zkSNARK parameters and how to verify them?
When installing the zcash client for the first time it downlods a bulk of around 900 MiB in zkSNARK parameters. I am wondering: why and what are they exactly used for? Is this a security feature? How to verify the parameters?
What are zkSNARK…
q9f
- 1,444
- 3
- 22
- 46
2
votes
0 answers
Would efficient Bulletproofs for CT increase transaction sizes? By how much?
Ignoring that it would be a hard fork, if Bitcoin implemented confidential transactions using Bulletproofs -- how much would an average transaction increase estimated in bytes?
(Just looking for a simple guesstimate here)
Jonathan Cross
- 1,410
- 10
- 30
1
vote
1 answer
Can "Confidential Addresses" preserve user privacy?
Can using "Confidential Addresses" be an alternative to zk-SNARKs to provide an acceptable privacy for a user?
And when we talk about "Confidential Transactions", does it mean we are using "Confidential Addresses"?
And if "Confidential Addresses"…
Questioner
- 1,151
- 8
- 22
1
vote
1 answer
Zerocoin vs. Zerocash ? are they the same ? Or two different protocols?
what is the main difference between Zerocoin vs. Zerocash ? are they the same ? Or two different protocols ? If they are two different protocols, what are similarities ?
Questioner
- 1,151
- 8
- 22
1
vote
0 answers
Detailed view of Z-cash transaction
Can anyone share and explain the details of a z-cash shielded and transparent transaction?
The block explorers have minimal details. They dont even have a zk-proofs in them.
user136368
- 111
- 2
1
vote
2 answers
What consensus algorithm is MimbleWimble/Grin using? Does it use Zero Knowledge Proofs as well?
Understand that MimbleWimble/Grin is privacy centric. Does it use Zero Knowledge Proofs to achieve the privacy goals?
In addition, what consensus algorithm is MimbleWimble/Grin using?
Nathan Aw
- 259
- 1
- 9
1
vote
1 answer
Are Hashed Timelock Contracts and Zero-Knowledge Contingent Payments the same thing?
This answer to How is a node in the middle prohibited from keeping the money in a routed Payment in Lightning network? describes how a Hashed Timelock Contract would be used to exchange the "secret" for a payment. This sounds a lot like the…
Murch
- 71,155
- 33
- 180
- 600
1
vote
1 answer
With MuSig2 can we now avoid any privacy leak of a Lightning channel's onchain UTXO?
Now we have access to Schnorr and MuSig(2) onchain can we avoid any privacy leak of a Lightning channel's associated onchain UTXO?
Michael Folkson
- 14,337
- 3
- 11
- 45
0
votes
1 answer
Is there a decentralized zk-SNARK (zero-knowledge Succinct Non-Interactive ARgument of Knowledge)?
Normally, in zk-SNARK, we need to generate two public keys: one for prover and one for verifier. However, the input parameter of this generator algorithm must be secret, meaning that it must be hidden for both prover and verifier.
And because of…
Questioner
- 1,151
- 8
- 22
0
votes
1 answer
What is the technological achievement that is needed in order to get effective SNARKs into Bitcoin?
AFAIU SNARKs may be introduced into the Bitcoin protocol as a soft fork (e.g. a new segwit version number), and this would enable many new use cases, such as verifying very advanced computations that are executed off-chain, directly on the chain.…
0
votes
0 answers
Bulletproofs vs Merkle paths for inclusion proofs
In this blog post, Andrew Poelstra comments that bulletproofs can be used for efficient merkle inclusion proofs.
How would these proofs compare in size and verifying time to simple merkle paths? Take for instance proving a thousand elements in a set…
Son Kaos999
- 349
- 1
- 13
-1
votes
1 answer
What does Starkware Industries mean?
What does Starkware Industries mean? Is it related to Zcash company?
Its name apparently comes from Zero Knowledge Stark (zk-STARKs).
I appreciate it if someone could define Starkware Industries in some lines?
Questioner
- 1,151
- 8
- 22