
ZKSend Protocol
65 posts

ZKSend Protocol
@ZKSend_Protocol
Private Messaging Reinvented with Zero-Knowledge. 4wogrZJCeUVkzjQkpugzdgcDpHhGgyUoQ39RGYvP3ZVz









Privacy matters – and so is the security level of privacy solutions, and therefore: What's the difference between TEE, ZK, MPC and FHE (or better yet, what is TEE, ZK, MPC and FHE) Today I explain: MPC 👨🏫 MPC stands for secure Multi Party Computation. It's the right theoretical tool when you want to offer privacy (1) with no central operator, and (2) to multiple users. It's great for privacy, but not for scalability. Here's a scenario: You want to run an auction in which the highest bidder gets a specific NFT. You want the bids to remain confidential, and you don't want to trust any single operator. MPC is a way for several different users, each with their private data (say, their bid for the NFT), to perform a computation so that at the end each user comes out with the minimal amount of information needed. In the case of the auction, when using an MPC: 1. The winner will know that they won, and how much they paid for the NFT. 2. All other users will only know that their bid didn’t win. 3. The other users won't know who won, nor how much the winner paid. MPC uses marvelous math (similar to what we use for ZK) to solve such problems. In fact, you can describe ZK as 1-user MPC, because if you have only one user with confidential data, then you use ZK. The problem with MPC: The protocols are *interactive*, meaning that all users have to collaborate and send across many messages. If one party gets tired and leaves, things get ugly and messy. Another problem: You can’t use languages like Cairo, nor standard programming languages, to write the logic of your smart contracts. Why? Using memory leaks information and ruins privacy, so you have to work harder to get it right. On a side note: MPC offers integrity only for those running the protocol actively. You can't run an MPC protocol offchain and then convince others of the integrity of the protocol. For integrity, you'll need to slap on ZK proofs. For all these reasons, we have yet to see full blown smart contracts supported by MPC on blockchains. I’m sure some of them will arrive, but it’ll take a while and be quite cumbersome initially. Next time: FHE The END



















