1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
|
Delivery-date: Wed, 28 Aug 2024 08:36:02 -0700
Received: from mail-yb1-f185.google.com ([209.85.219.185])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBD5ZD7PQ5YPRBWUHXW3AMGQEDEAJNVY@googlegroups.com>)
id 1sjKiI-0005hM-E8
for bitcoindev@gnusha.org; Wed, 28 Aug 2024 08:36:02 -0700
Received: by mail-yb1-f185.google.com with SMTP id 3f1490d57ef6-e035949cc4esf12983159276.1
for <bitcoindev@gnusha.org>; Wed, 28 Aug 2024 08:36:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1724859356; x=1725464156; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-sender:mime-version
:subject:references:in-reply-to:message-id:to:from:date:sender:from
:to:cc:subject:date:message-id:reply-to;
bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=;
b=TQk6gj4/3q5HdmvET1wx47s+es5HLQoPGJL58At0oRtB+GCn8Q24snfAT6yvnTjKPD
Bm0O3sdSuwkxwPTDcxhHgQiRUsjgo30L8KjRDrDF3rTCoFGoYf4wzPud8rl6NSKGLvHo
Dk1LY5rcltVMwLdjlox9dR6CxuHOgQJgfxvWBr07hqhSJ5p9c03BDY3KsmdfTz+VUCEE
LecIkwY1oRvLc7PTuvsikVKHHGRwwAXoZuzGkSJjDnKpwLUNzqXc4g9X5YjLtG65nsRz
ItJgzWjx3nF2whB8KHyUxBNrJ7z7/xQElSTEF5qKYkBjXpMNqkLsjBSHRqabKj1v61sy
C49A==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1724859356; x=1725464156; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-sender:mime-version
:subject:references:in-reply-to:message-id:to:from:date:from:to:cc
:subject:date:message-id:reply-to;
bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=;
b=WKGMcLklvOqi4zv9PJ9o11wJadw/gFZ+XKCfrdplcY+yVOscdPMzXH3R4XbnZDsd4q
NBTsvBOAti32067Zaq5PtAWrJ/z8D31ZQ/iBrXXrvAojK6OH3Zi/yWLHI9qEZpFFGO2w
uQENoF2qQJ02qERK5UAoyShIMTss6tpwyF2BNKA4ZhbnpTv+YWSybnpD8WJ1NXAVFQUW
pNibVXilaMjU0u55IXRQ/vXXN0BXJnTP3pmVEfm539TS+/a+sYH4FIv4rcrpGAMveCBT
cjPY5wzL8FIZ89z6J6EI00tkuYZKYR9wonZBQ72k/+nMAWJlE/P/W/G2VYE3FgJ1FqY6
E7uA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1724859356; x=1725464156;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-sender:mime-version
:subject:references:in-reply-to:message-id:to:from:date:x-beenthere
:x-gm-message-state:sender:from:to:cc:subject:date:message-id
:reply-to;
bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=;
b=UT9LdKoSUcLzWJ5ODZmMqQc6b7+dacRxNgHTuIREZsb+RMfkb9obvBA7xHnE2E/QYr
75cNdBr1/pDdiMepaC7sBMI2YdUb0LLFuAPq3wLpiOSjQPeEihvkO/PZE6jQijgD/1Xg
xsgE6LDzqWaFgIYn2tXssmsbgk8eNheu3ui3Pwe1A7LDbHuPzSxixrtVsi1++uXa7zRe
aHcSrNm5OQ+lXpvqX4gEYpO8dURAG9WADQ8PypciLhslJ8Eg2wTsdqdSbSWUd38DeiEW
CDq+LfszrleM+o3DIzZ8bEquqmWF806VM9mLkC7wOi2orlEnf3fz7iaJnA/rtiBV3n0t
IShQ==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=1; AJvYcCWegP3rMf9FJbYlSSwnV4k71YDr2BnlIKn8vdTQmVCmCLHTuU9vNDuFIiG6IFo/14mUZi9de2md6/A3@gnusha.org
X-Gm-Message-State: AOJu0YwRUk9OGCvfGKP7lxQDob9K5YuLQKX/7nwx0fQOP4mf6ZCvCzBc
pyfkq5x+lFfk+XfmQIP9PpNkz2nBvwW+rQsjOPdXpph6TyUZ+zuj
X-Google-Smtp-Source: AGHT+IEVWKvlARzEMehd1BEugUcRub9YuSEHc69JmeDFohF/ZvX14ayGvJTD/LKae6ilMq89b1HKQg==
X-Received: by 2002:a05:6902:102c:b0:e13:ca8d:836f with SMTP id 3f1490d57ef6-e1a45825853mr2833534276.37.1724859355402;
Wed, 28 Aug 2024 08:35:55 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com
Received: by 2002:a05:6902:1204:b0:e13:df92:d2cc with SMTP id
3f1490d57ef6-e1a5822ef3els45810276.1.-pod-prod-01-us; Wed, 28 Aug 2024
08:35:53 -0700 (PDT)
X-Received: by 2002:a05:690c:4812:b0:6b0:d9bc:5a1e with SMTP id 00721157ae682-6c629a00478mr123924897b3.46.1724859353691;
Wed, 28 Aug 2024 08:35:53 -0700 (PDT)
Received: by 2002:a05:690c:801:b0:66a:8967:a513 with SMTP id 00721157ae682-6d001c5e219ms7b3;
Wed, 28 Aug 2024 08:33:59 -0700 (PDT)
X-Received: by 2002:a05:690c:620d:b0:6be:523:af4e with SMTP id 00721157ae682-6d1533e1ee6mr19391637b3.19.1724859238916;
Wed, 28 Aug 2024 08:33:58 -0700 (PDT)
Date: Wed, 28 Aug 2024 08:33:58 -0700 (PDT)
From: Weiji Guo <weiji.g@gmail.com>
To: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Message-Id: <63186352-b441-4548-b7fa-8ff0d5f6fc97n@googlegroups.com>
In-Reply-To: <8d3084bc-aece-48ba-a08d-01b53392b64dn@googlegroups.com>
References: <93611162-6029-4308-98b5-3c95b30a2ac9n@googlegroups.com>
<22162f02-9362-4d1c-b0ce-3cf8dd01bd93n@googlegroups.com>
<8d3084bc-aece-48ba-a08d-01b53392b64dn@googlegroups.com>
Subject: [bitcoindev] Re: OP_ZKP updates
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_560690_1591753725.1724859238505"
X-Original-Sender: weiji.g@gmail.com
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.5 (/)
------=_Part_560690_1591753725.1724859238505
Content-Type: multipart/alternative;
boundary="----=_Part_560691_649305405.1724859238505"
------=_Part_560691_649305405.1724859238505
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I believe I have found the solution to the open issue mentioned in the=20
earlier email. It is just recursive=20
verification. Instead of publishing each application circuit's verification=
=20
key on-chain, we should have=20
only one circuit that OP_ZKP will verify, which is a recursive verifier.=20
Interested readers are welcome to visit the GitHub org dedicated for=20
OP_ZKP: https://github.com/opzkp
So far I have just put up the high level ideas=20
here: https://github.com/opzkp/tea-horse. There are nothing
else yet. But we will add stuff as we move on.
Regards,
Weiji
On Tuesday, July 23, 2024 at 8:40:08=E2=80=AFAM UTC+8 Weiji Guo wrote:
> Yes, that's true. With Dory we will have to work on some pairing-friendly=
=20
> curve. Not secp256k1.
>
> On Tuesday, July 23, 2024 at 3:01:59=E2=80=AFAM UTC+8 Weikeng Chen wrote:
>
> I need to point out that Dory requires pairing, and therefore it cannot=
=20
> work with secp256k1?
> Please circle back.
>
> On Monday, July 22, 2024 at 9:16:18=E2=80=AFAM UTC-5 Weiji Guo wrote:
>
> =E2=80=94=E2=80=94=E2=80=94What-ifs=E2=80=94=E2=80=94=E2=80=94
>
> What if the open issue cannot be resolved? We might consider Dory. It is=
=20
>
> transparent, requires pairing, and has logarithmic proof size but=20
> concretely larger=20
>
>
--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/=
bitcoindev/63186352-b441-4548-b7fa-8ff0d5f6fc97n%40googlegroups.com.
------=_Part_560691_649305405.1724859238505
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I believe I have found the solution to the open issue mentioned in the earl=
ier email. It is just recursive=C2=A0<div>verification. Instead of publishi=
ng each application circuit's verification key on-chain, we should have=C2=
=A0</div><div>only one circuit that OP_ZKP will verify, which is a recursiv=
e verifier.=C2=A0</div><div><br /></div><div>Interested readers are welcome=
to visit the GitHub org dedicated for OP_ZKP:=C2=A0https://github.com/opzk=
p</div><div><br /></div><div>So far I have just put up the high level ideas=
here:=C2=A0https://github.com/opzkp/tea-horse. There are nothing</div><div=
>else yet. But we will add stuff as we move on.</div><div><br /></div><div>=
Regards,</div><div>Weiji<br /><div><br /></div></div><div class=3D"gmail_qu=
ote"><div dir=3D"auto" class=3D"gmail_attr">On Tuesday, July 23, 2024 at 8:=
40:08=E2=80=AFAM UTC+8 Weiji Guo wrote:<br/></div><blockquote class=3D"gmai=
l_quote" style=3D"margin: 0 0 0 0.8ex; border-left: 1px solid rgb(204, 204,=
204); padding-left: 1ex;">Yes, that's true. With Dory we will have to =
work on some pairing-friendly curve. Not secp256k1.<div><br><div></div></di=
v><div><div><div dir=3D"auto">On Tuesday, July 23, 2024 at 3:01:59=E2=80=AF=
AM UTC+8 Weikeng Chen wrote:<br></div></div></div><div><div><blockquote sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex"><div><div><div>I need to point out that Dory requires pairing,=
and therefore it cannot work with secp256k1?</div><div>Please circle back.=
</div></div></div></blockquote></div></div><div><div><blockquote style=3D"m=
argin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left=
:1ex"><div><div dir=3D"auto">On Monday, July 22, 2024 at 9:16:18=E2=80=AFAM=
UTC-5 Weiji Guo wrote:<br></div></div></blockquote></div></div><div><div><=
blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex"><div><blockquote style=3D"margin:0px 0px 0px 0.8=
ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<p>=E2=80=94=E2=80=94=E2=80=94What-ifs=E2=80=94=E2=80=94=E2=80=94<br></p></=
blockquote></div></blockquote></div></div><div><div><blockquote style=3D"ma=
rgin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:=
1ex"><div><blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px sol=
id rgb(204,204,204);padding-left:1ex">
<p>What if the open issue cannot be resolved? We might consider Dory. It is=
=C2=A0<br></p>
<p>transparent, requires pairing, and has logarithmic proof size but concre=
tely larger=C2=A0</p></blockquote></div></blockquote></div></div></blockquo=
te></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/bitcoindev/63186352-b441-4548-b7fa-8ff0d5f6fc97n%40googlegroups.=
com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msg=
id/bitcoindev/63186352-b441-4548-b7fa-8ff0d5f6fc97n%40googlegroups.com</a>.=
<br />
------=_Part_560691_649305405.1724859238505--
------=_Part_560690_1591753725.1724859238505--
|
