Alexander Vlasov

Just run a test with peak load of 100 TPS of ZK transactions on ETH mainnet. We could do more but hit the limit by consuming the entire capacity of DigitalOcean's largest suitable servers (next time AWS). Block explorer: mainnet.matter-labs.io

@ebfull Correction - verifier was essentially incomplete, need to make an unhelped prover first for a proper testing

@ebfull Single proof verification takes 1 million gas, not you bad. Will check later with a aggregate

I've been working on an implementation of the Sonic MPC for BLS12-381, to give succinct zero-knowledge to everyone with minimal trust. There are some new techniques and ideas that I want to explore with a wider community before we begin. DM me if you're interested in helping!

@btcVeg @ebfull Also looks like naive efficient batching of SONIC proofs on a smart-contract is hardly possible using the smart-contract, cause every proof with advice requires around 13 multiplications in G1 with unique bases per proof

@btcVeg @ebfull Groth16 with 1 input would be 500k, going down to 250-300k in a batched mode. I don’t remember exactly for Pinocchio, but may be around 2m

@ebfull At least we’d need max circuit capacity for our Ethereum based solutions to have maximum efficiency per unit of gas

@Shamatar Perhaps, though in my experience I prefer to minimize the SRS size based on what we think people will conceivably need, since it makes for easier updates. (People can put it on DVDs, less bandwidth usage, etc.) I think this is considerably less than the maximal d possible.

I'm happy to announce Sonic, a new zero-knowledge SNARK developed in collaboration with Mary Maller, Markulf Kohlweiss and Sarah Meiklejohn. ia.cr/2019/099

@ebfull Regarding the transcript - what would you suggest? A ceremony organizer has to verify a contribution and decompress the previous accumulator for a new contribution - that makes good checkpoints - so one can just truncate old records from the transcript assuming it’s verified

@Shamatar Looking at it. Cool! We need to make changes including: 1. The hash chain should be over the public keys so the parameters contain their own transcript, avoiding a gigantic transcript like in powers of tau 2. We don't need a randomness beacon, we'll use Fischlin transformations

@ebfull Code is curve agnostic, uses the same pairing traits as original one, we just formed, extended it and implemented bn254 github.com/matterinc/pair…

@ebfull github.com/matterinc/alph… Let’s start the MPC asap

Sonic doesn't require a trusted setup for each circuit, but only a single setup for all circuits. The setup never has to end, so it can be secured indefinitely by accumulating more contributions. (Only one previous contributor must be honest.)

#ETHSingapore We’ve released a bellman for ETH, a zkSNARK proving system as a part of our work for the real hackathon project, source is here github.com/matterinc/bell… Practical example is also available, solves important case of Plasma Cash history size github.com/matterinc/plas…

Our Plasma implementation is stable enough to proceed to the mainnet. Still, here be dragons, amount of complexity is insane plasma-mainnet.thematter.io

Rinkeby 0x6394b37Cf80A7358b38068f0CA4760ad49983a1B

Supposed Plasma operator for test 1 : 0xe6877a4d8806e9a9f12eb2e8561ea6c1db19978d

Want to win a #Hearthstone beta key? RT & Follow to enter! More information and tonights news at: hearthpwn.com/news/175-arena…

We're doing another round of #Hearthstone Beta Key giveaways. RT and Follow to enter! Ends Oct 14. Details here: hearthpwn.com/news/169-heart…

@Door_Green Все будет!

I just backed Shroud of the Avatar: Forsaken Virtues on @Kickstarter kck.st/WahMzs

#Twitition #WeWantAnOpeniOS twitition.com/mdinc