Home

I suspect that many of you see no real connection between social, political, and ethical values and what you work on. You don’t build bombs, experiment on people, or destroy the environment. You don’t spy on populations. You hack math and write papers. This doesn’t sound ethically laden. I want to show you that it is. –Phillip Rogaway...

tl;dr: Confidential fungible assets (CFAs) are in town! But first, a moment of silence for veiled coins.

tl;dr: For now, just including my tweet, which I keep having to look up to show to people.

This blog post describes a flawed, non-ZK range range proof based on univariate polynomials. (For an actually-ZK scheme, see this post.)

tl;dr: Forget univariate. Forget FFTs. Multilinear polynomials are the bomb! $ \def\bin{\{0,1\}} \def\eq{\mathsf{eq}} \def\SC{\mathsf{SumCheck}} \def\MLE#1{\mathsf{MLE}(#1)} \def\i{\boldsymbol{i}} \def\j{\boldsymbol{j}} \def\x{\boldsymbol{x}} \def\X{\boldsymbol{X}} \def\y{\boldsymbol{y}} \def\Y{\boldsymbol{Y}} $

tl;dr: Hyrax is polynomial commitment scheme (PCS) with (1) sublinear commitment-and-proof sizes and (2) sublinear opening-and-verification times. Hyrax is constructed from Pedersen vector commitments and Bulletproofs inner product arguments (IPAs). Hyrax has information-theoretic hiding commitments and honest verifier zero-knowledge (HVZK) PCS ...

tl;dr: KZG + Hyrax = KZH[^KZHB25e]. This name makes me happy: not only it stands on its own but it also coincides with the first three authors’ initials!

tl;dr: Motorcycles are drugs. Alin might buy a motorcycle and risk the few, still-functioning limbs in his body. Someone should convince him not to do this. Update (July 2020): Alin purchased a 2017 Honda Rebel 500. He has never been more happy and frightened at the same time. Even after taking basic, intermediate and advanced riding clinics, ...