Commit-and-Prove Zero-Knowledge Proof Systems and Extensions

on YouTube ↗59m

" summary

Proposal defines a standard for commit-and-prove and its encryption extension, provides a reference doc and asks the working group to pick concrete instantiations; it tests a commit-carrying Saber construction that plugs into SNARKs and notes EC ElGamal costs (one curve point per ~5–10 message bits, large space overhead). The group agrees to prioritize Pedersen commitments and conventional hash-based commitments first, and to standardize use of Groth16 / LegoGroth16 for commit-and-prove wiring.

AI-written summary · about

" chapters (23)

1. 0:00Intro
2. 2:18Intuition
3. 2:56Usability
4. 4:26Application Examples
5. 6:14Encrypted Proof
6. 6:52Encrypted Improve
7. 8:04Examples
8. 9:58CommitCarrying Encryption
9. 11:13Summary
10. 11:59References
11. 12:45Next steps
12. 14:56CommitImprove
13. 17:32Encrypted
14. 18:26Application
15. 19:50General Extensions
16. 20:31Discussion
17. 30:32Knowledge Soundness
18. 35:02Standardization
19. 37:35Implementations
20. 39:04Non algebraic commitments
21. 41:19Summary of discussion
22. 46:07Poll
23. 52:16Sigma Protocols

" related talks

• 25mLegoSNARK: Modular Design and Composition of Succinct Zero Knowledge ProofsDario Fiore · 2nd ZKProof Workshop 2019
• 41mGKR based Zero-Knowledge ProofsYael Tauman Kalai · 2nd ZKProof Workshop 2019
• 44mStandardizing Zero Knowledge Proofs - KeynoteRan Canetti · 1st ZKProof Standards Workshop 2018
• 44mBilinear Pairings-based Zero-Knowledge ProofsJens Groth · 2nd ZKProof Workshop 2019
• 44mZero-Knowledge Proofs: Simultaneously ensuring integrity and privacyTjerand Silde · NDC Security 2026
• 52mDiscrete Log based Zero-Knowledge ProofsDan Boneh · 2nd ZKProof Workshop 2019
• 26mApplications of Zero Knowledge Proofs in the Banking IndustryEduardo Moraes · 2nd ZKProof Workshop 2019
• 35mEfficient Zero Knowledge Protocols: The Modular ApproachYuval Ishai · 2nd ZKProof Workshop 2019