index.md

Science!

What is a zero-knowledge proof?

• Zero Knowledge Proofs: An illustrated primer
• What are zk-SNARKs?

Zero-knowledge proving systems

• Pinocchio [PGHR13]
• [BCTV14b]
• [CTV15]
• ZKBoo [GMO16]
• [Groth16]
• Bootle proofs [BCC+16]
• ZKB++ / Picnic [CDGORRSZ17]
• Ligero [AHIV17]
• Hyrax [WTSTW17]
• zk-STARKs [BBHR18]
• Updatable Universal CRSs [GKMMM18]

Implementations of proving systems

• libsnark - C++ library for zk-SNARK proofs
  • Pinocchio (implements [BCTV14a] approach)
  • [BCTV14b]
  • [CTV15]
• bellman - Rust library for zk-SNARK proofs
  • [Groth16]
• ZKBoo
• Bootle proofs
  • BulletProofLib (implements Bulletproofs [BBBPWM17] approach)
  • secp256k1-zkp (experimental) (implements Bulletproofs [BBBPWM17] approach)
  • ristretto-bulletproofs (implements Bulletproofs [BBBPWM17] approach using Ristretto on Curve25519) (notes)
• Picnic
  • Reference implementation
  • Optimized implementation
• libSTARK
  • zk-STARKs
• emmy
  • ZKP primitives for Camenisch-Lysyanskaya anonymous credentials
  • Camenisch-Lysyanskaya anonymous credentials (work in progress)
  • client-server (prover-verifier) communication based on Protobuffers and gRPC

DSLs for writing circuits

• jsnark - Java library for building circuits for preprocessing zk-SNARKs, backed by libsnark
• ZoKrates - Toolbox for zk-SNARKs on Ethereum, backed by libsnark
• Snarky - OCaml front-end for writing R1CS SNARKs, currently backed by libsnark

Example circuits

• Zcash Sprout
  • Based on Zerocash [BCGGMTV14]
  • C++ implementation over BN128 using libsnark
  • Rust implementation over BLS12-381 using bellman
• ANONIZE [HMP15]
  • Mobile applications (closed-source)
• Zcash Sapling (in-progress)
  • Rust implementation over BLS12-381 using bellman

So are they fast yet?

Stay tuned! 😁

I'd like to add another proving system / write a short explainer / remove those awful 90's images

You can make a pull request here!