~/talk

ZKBoo: Faster Zero-Knowledge for Boolean Circuits

Talkat USENIX Security '16 · 2016-08-10..08-12· [cryptography]
links:none on file
links:none on file
slides:none on file

Protocol claims a practical, non-interactive zero-knowledge for Boolean circuits using MPC-in-the-head and a new linear decomposition of the circuit; it's a three‑round Σ-protocol made non-interactive via Fiat–Shamir. Implementation proves SHA-1 preimage in ~13 ms (verification ~5 ms), with a 444 KB proof (SHA-256 ≈ double), outperforming Pinocchio proving time by ~1000× but with proof size linear in gates. Soundness is 2/3 per repetition (repeat to reach 2^-18). Code and benchmarks are on GitHub.

AI-written summary · about

  1. 0:00Introduction to ZK protocols
  2. 2:22Comparing ZK approaches
  3. 4:20Zika-Boom overview
  4. 6:37Sigma protocol basics
  5. 9:30Circuit decomposition
  6. 12:52Construction of Zika-Boom
  7. 15:30Results and implementation
  8. 18:49Recap and future work
  9. 21:02Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.