Amit KumarNew York UniversityProof Carrying Knowledge from folding GKR with protostarCurrent Interactive Verifiable Computation (IVC) schemes face challenges with the Witness-Multi-Scalar Multiplication (Witness-MSM) barrier, limiting effectivity. We suggest leveraging the Goldwasser-Kalai-Rothblum (GKR) accumulation scheme to considerably scale back the witness dimension, overcoming these limitations. Using the Protostar compiler, we are going to fold the GKR protocol, enhancing computational effectivity. Moreover, we purpose to increase IVC right into a Proof Carrying Knowledge framework, facilitating parallel folding in a tree construction to streamline verification processes and enhance scalability.Pratyush MishraUniversity of Pennsylvania and Stanford UniversityZippel: A language and compiler for constructing proof systemsWe suggest Zippel, a brand new language and compiler for constructing appropriate and environment friendly succinct proof methods. Zippel permits the developer to specific the protocol in a high-level language that’s near its mathematical description, after which routinely manages low-level particulars like parallelism, reminiscence administration, use of customized {hardware}, and so forth. Zippel’s compiler additionally has highly effective and quick static analyses that may assist builders catch protocol soundness and zero-knowledge bugs. Our hope is that Zippel will make it simpler for builders to implement and experiment with new proof methods with out sacrificing efficiency.Julian SutherlandNethermindLean Extraction of Circuit Constraints from Halo2The Halo2 library is a broadly used ZK infrastructure library that gives a method to develop prover/verifier pairs in a high-level area particular language embedded in Rust. To formally confirm circuits on this language, and thus guarantee the very best degree of safety, we’re aiming to develop a proper verification harness to seamlessly extract the constraints from a Halo2 circuit and cause about them within the Lean 4 proof assistant. We have already got important progress in the direction of and want to lengthen it to assist the total gamut of Halo2 options.Jordan CoppardIndependentZK BenchmarksPerformance benchmarking (prover time, verifier time, proof gate dimension) for several types of proving methods in addition to the prover/verifier implementations of these proving methods over numerous pc architectures (x86_64, ARM). To create an comprehensible (i.e. not only a dump of check knowledge) and accessible repository of benchmarks surrounding the ZK ecosystem such that builders, venture managers, and most people could make knowledgeable selections relating to their necessities, or just be taught extra in regards to the present panorama (e.g. efficiency going up/down, new proving methods and so forth).Stanislav MarycevzkFoldZKFold Symbolic: a Zero-Data Good Contract LanguagezkFold Symbolic is the programming language for writing zero-knowledge sensible contracts. It’s a high-level purposeful language, a subset of Haskell. Good contracts written in zkFold Symbolic are compiled immediately into arithmetic circuits that may be utilized by numerous zero-knowledge protocols. Being a high-level language, it dramatically reduces the barrier to entry because the builders don’t should be consultants in ZK cryptography. Offering sensible contract builders with a correct device to faucet into the facility of zero-knowledge protocols allows them to create zk-apps and sensible contracts which are on one other degree when it comes to effectivity and person expertise. Furthermore, with extra builders adopting this strategy, we’re decreasing the on-chain knowledge and computation footprint, successfully scaling Ethereum and EVM chains.Jordan CoppardIndependentZK TreesitterAgnostic treesitter grammars for main zero-knowledge circuits languages Noir (Aztec) and Cairo (Starkware) that are maintained over time. To enhance developer tooling in addition to present broader entry to instruments such that builders can choose what’s greatest for them. – Editor-agnostic treesitter grammars for Noir and Cairo. – Upkeep of those grammars as mentioned languages evolve over time. – Full and simple to grasp documentation such that anybody can contribute to those grammars when they’re launched; or use them as well-structured bases for different treesitter grammars.Sergey KaunovIndependentWasm PLUMEThis venture goals to make the safe/cryptographic PLUME scheme implementation extra accessible in environments outdoors of the Rust ecosystem. The first goal is to extend the adoption of the scheme by minimizing the divergence of the Wasm launch from the default goal and offering a downstream-friendly API. The venture’s profitable adoption will result in enhanced privateness, simplified id administration, nameless moderation, proof of solvency, versatile purposes, and encouragement of person adoption within the Ethereum ecosystem.Lako NemaIndependentOnboard customers to verifiable KYCWe wish to convey builders to ZK by showcasing how the standard instruments interaction. ZK fanatics wish to reply two questions earlier than constructing an app: what downside can we resolve with it? and the best way to construct such an app? Our venture goals at answering each questions by creating an open-source end-to-end app on verifiable KYC. We expect that non-public KYC is a requirement for a widespread adoption of blockchains. And we wish to present how ZK can convey this. We wish to construct a easy but highly effective boilerplate for verifiable KYC, primarily based on Noir language. We plan to construct an end-to-end app, with proving, verifying on-chain and on the consumer aspect. We wish to permit any new developer to launch the app with one command. We’ll name it successful if the venture is forked and edited by builders prepared to be taught extra about ZK. We plan to write down weblog posts and onboarding guides to widen the publicity of the venture.Albert GarretaNethermindLatticeFold implementation and folding schemes for FRI-based SNARKsThis grant proposal goals to develop and implement a Proof of Idea (PoC) for the LatticeFold folding scheme [BC24], benchmarking it in opposition to present schemes like HyperNova. Moreover, we purpose to analysis methodologies to create a “STARK-friendly” folding scheme primarily based on LatticeFold. This may permit to make use of folding strategies within the context of FRI-based SNARKs (e.g., ethSTARK, Plonky2/3, Risc Zero, Boojum, and so forth.) Prof. Dan Boneh and Prof. Binyi Chen, authors of the LatticeFold paper, have agreed to help our staff for the venture’s period.Albert GarretaNethermindSNARKs for non-prime arithmeticsThis grant proposal seeks to develop a SNARK tailor-made for proving statements over rings of the shape Z/nZ, for Z the ring of integers and n an arbitrary integer. This deviates from the standard setting the place statements are expressed over a main discipline F_p=Z/pZ for p a main. We purpose to give attention to the circumstances the place n is an influence of two or a product of two massive primes. This may allow to natively show statements involving computations reminiscent of: RSA-based cryptography operations, CPU operations, floating level arithmetic (required for, e.g., machine studying), non-algebraic hash features, and so forth. Right here, by “natively,” we imply that every of those computations is arithmetized overZ/nZ, for n an applicable integer, slightly than over a finite discipline. It’s recognized that the latter “non-native” arithmetization can create overheads of an order of magnitude within the circuit/R1CS/AIR dimension.Stefanos ChaliasosIndependentReproducible ZK Vulnerabilities to Enhance Ecosystem’s SecurityZero-knowledge proofs (ZKPs), notably SNARKs (Succinct Non-Interactive Argument of Data), have transitioned from theoretical constructs to sensible, real-world purposes, providing privateness and verifiability. Nonetheless, the complexity of designing and implementing ZKP purposes introduces a myriad of vulnerabilities. Latest analyses have make clear the distinctive challenges and vulnerabilities at each the circuit degree and integration degree inside the SNARK stack, posing important threats to ZK methods. Regardless of developments in automated safety defenses, their effectiveness stays largely untested on intensive, real-world datasets. Furthermore, the shortage of reproducible examples lessens practitioners’ and researchers’ means to grasp and mitigate ZK vulnerabilities successfully. This venture goals to increase our earlier work on ZK safety by growing a complete dataset and framework that includes reproducible ZK exploits. This useful resource will function each an academic device for newcomers and an in depth examine base for consultants. Moreover, we are going to consider the effectiveness of present safety instruments in opposition to this dataset to pinpoint areas needing enchancment, finally aiding within the growth of extra sturdy detection instruments.Stefanos ChaliasosIndependentDetecting Non-public Info Leakage in Zero-Data ApplicationsPractical Zero-Data proofs turned doable because of the development of privacy-preserving tasks reminiscent of Zcash. Notably, in the previous couple of years, most SNARK-enabled tasks have targeted on verifiable computation, with zk-rollups being a notable software. Traditionally, crafting ZKP purposes has been a difficult activity, necessitating experience in libsnark and low-level programming. The emergence of extra accessible DSLs like Circom and arkworks, whereas mitigating some complexity, nonetheless leaves room for vital bugs, reminiscent of under-constrained vulnerabilities [3]. Latest developments in ZK programming languages, reminiscent of Noir and Leo, purpose to simplify ZK software growth and scale back potential vulnerabilities, attracting a broader developer base probably unfamiliar with cryptographic fundamentals. A prevalent problem in these high-level languages, which can be frequent in lower-level languages, is the leakage of personal variable data. As an example, such a leakage occurs when a ZK program publicly outputs the sum (z ) of a non-public and a public variable (x and y, respectively). Understanding the general public enter x and the general public output z allows the deduction of the worth of the personal variable y. Conversely, hashing the sum of x and y right into a public variable z doesn’t leak the worth of the personal variable y, assuming the hash perform’s safety. This venture proposes the design and implementation of a static evaluation strategy enhanced with taint monitoring, enter technology, and SMT fixing to establish and validate cases of personal variable data leakage. Our strategy generates (1) warnings for potential leaks, (2) errors for confirmed leaks, and (3) visible graphs tracing personal worth propagation to public outputs for debugging functions. Our plan is to use our strategy to Noir, and subsequently to different ZK DSLs like Leo.Patrick StilesIndependentMetal Backend for Icicle MSMSupporting Apple’s M sequence GPU in Icicle by making a Steel Shader Language backend for Icicle MSM utilizing would expose gpu efficiency advantages to all builders within the zk ecosystem which have an Apple machine with a M sequence chip. Builders with solely a Macbook would obtain related gpu efficiency advantages without having entry to Nvidia GPU gadgets. These efficiency advantages would even have a excessive affect on tasks whose knowledge is airgapped or can’t depart the host machine reminiscent of consumer aspect proving purposes.Gaylord WarnerZK HackZK Whiteboard Classes Season 2ZK Whiteboard Classes is a sequence of academic movies targeted on the constructing blocks of ZK. It takes the type of a mini course, adopted by video interviews with high zk-practitioners, studying collectively and sharing their data on a whiteboard. Season 1 was launched in 2022, produced by ZK Hack in collaboration with Polygon. It consists of 19 movies and featured audio system reminiscent of Dan Boneh from Stanford College, Justin Drake, Mary Maller, Barry Whitehat from Ethereum Basis, and lots of extra. The hosts had been Brendan Farmer from Polygon Zero and Bobbin Threadbare from Polygon Miden. ZK Whiteboard Classes Season 2 will cowl extra of the constructing blocks of ZK, offering up-to-date foundational data for researchers and builders new to ZK with 8 new modules, produced by ZK Hack as soon as once more.Wenhao WangYale UniversityCirrus: Performant and Strong Distributed SNARK Technology through Computation DelegationWe suggest to design and develop Cirrus, a brand new protocol for performant and sturdy distributed SNARK proof technology exploiting the thought of computation delegation. The purposes are ubiquitous, together with ZK-Rollups, zkVMs, and any ZK purposes involving massive circuits. Whereas present distributed SNARK proof technology schemes enhance effectivity and scalability by distributing the work- load throughout a number of machines, they’ve non-optimal prover time, communication prices, proof dimension, and verifier time. They’re additionally not attack-proof when malicious nodes exist within the distributed SNARK technology course of. Our protocol will obtain important enchancment, with linear prover time, fixed communication value per prover, and robustness to malicious provers, addressing the present bottleneck in present methods.Sergio ChouhyEryx & ManasPlonky2 backend for ACIRWe will develop the Arithmetic Circuit Intermediate Illustration (ACIR) ecosystem by constructing an open-source Arithmetic Circuit Digital Machine (ACVM) backend for the Plonky2 prover. It will allow customers of ACIR-compatible DSLs to leverage Plonky2 benefits; and it’ll permit Plonky2 circuit builders to take pleasure in DSLs abstraction & tooling (eg: Noir debugger). We envision that in growth, invaluable insights relating to ACIR suitability as a widespread normal – and even potential enhancements to it – will come up.Paul YuIndependentLookups comparability desk (pace, reminiscence, preprocessing): univariate + multilinearWe purpose to develop a complete comparability desk that focuses on the efficiency (together with pace, reminiscence utilization, and preprocessing necessities) of varied lookup arguments like pylookup, Caulk, Baloo, CQ, Lasso, and LogUP+GKR. This desk will examine each univariate and multilinear polynomial commitment-based lookup arguments. The venture’s main goal is to benchmark these lookup arguments to help builders in selecting probably the most appropriate options for manufacturing environments. This entails implementing the lookup arguments talked about, making a benchmark desk, and writing an in depth weblog publish highlighting the important thing distinctions and efficiency metrics of those lookup arguments. The outcomes of this venture are important for the Ethereum ecosystem. It’ll improve decision-making for Layer 2 options by offering detailed comparisons of lookup arguments, facilitate the interpretation of theoretical protocols into production-level code, and function an academic useful resource for brand new researchers. The venture staff includes Harry Liu, Yu-Ming Hsu, Jing-Jie Wang, and Paul Yu, every contributing important hours per 30 days to the venture. The venture shall be carried out in phases, with the methodology together with the implementation of lookup arguments utilizing Python, optimization of those arguments in response to the unique papers, and benchmarking their pace and reminiscence utilization. The staff will publish a desk and diagram to match these metrics precisely throughout constant {hardware} settings. Polynomial dedication schemes shall be carried out as described within the authentic papers or primarily based on academic assumptions in circumstances the place the unique analysis lacks detailed protocol specs.Igor GulamovZeroPoolMinimal totally recursive zkDA rollup with sharded storageCurrent rollups publish blocks of their entirety on Layer 1, which is dear, limits scalability, and prevents true recursion. Publishing a rollup’s blocks on one other rollup is just not working, as a result of anyway, the information will float as much as Layer 1. We suggest a novel rollup structure that makes use of zero-knowledge proofs for knowledge availability, sharded storage, and execution. All proofs are mixed right into a single succinct proof, enabling environment friendly verification and unlocking infinite recursion – rollups may be deployed on high of different rollups with out limitations. This breakthrough design paves the best way for reworking Web2 into Web3 and attaining the scalability endgame. Regardless of benefits in safety and scalability, zk rollups presently lag behind optimistic rollups in adoption on account of historic causes. This strategy is just not obtainable to optimistic rollups, as they can not generate succinct common proofs. Our strategy permits ZK rollups to overhaul their opponents.Artem GrigorIndependentZK-ML-IOS IntegrationThis venture goals to reinforce the present iOS toolkit for Zero-Data Proofs (ZKP) deevelopment. Particularly, the venture goals so as to add assist to the mopro library for an quite common proving system – Halo2. Moreover, the venture will use the achieved integration to port the state-of-the-art Zero-Data Machine Studying (ZKML) library, EZKL, to iOS gadgets. These each integrations would profit a wider group and unlock extra subtle ZKML purposes immediately on cellular gadgets, thereby increasing the chances for knowledge privateness and safe computing on edge gadgets.Chao MaSnarkifySiriusThis venture introduces CycleFold to Sirius the open-source Plonkish Folding Framework for Incrementally Verifiable Computation (IVC). CycleFold is a brand new strategy to instantiate folding-scheme-based recursive arguments over a cycle of elliptic curves revealed in August 2023. CycleFold has the potential to reinforce folding efficiency by round 3x by means of minimizing the accountability of the secondary circuit and decreasing the variety of BigInt operations. Specifically, Sirius beforehand defines its main and secondary IVC circuits symmetrically; with CycleFold, the first circuit bears the principle performance, whereas the ECC operations are delegated to the secondary circuit.Hanze GuoDLT Science FoundationBenchmarking ZK-circuits Throughout A number of SNARKs/STARKs Growth FrameworksZKPs, represented by ZK Layer 2 in fashionable cryptography purposes, provide a wealthy technical stack, particularly with SNARK and STARKs. Nonetheless, because of the steady emergence of latest instruments and libraries for growth, together with the inherent variety and complexity, proposing an intuitive and complete benchmark framework for testing and evaluating numerous strategies’ execs and cons stays a problem. Regardless of present analysis masking complete benchmarks of multi-layered ZKP environments, together with arithmetic, elliptic curve, and circuit ranges, there are nonetheless deficiencies in two dimensions: (1) Inclusion of the newest and most complete ZKP growth frameworks (2) Wealthy, reusable, normal testing circuits. Due to this fact, we purpose to: (1) comprehensively gather and set up the event instruments utilized in common ZK Layer 2 tasks (2) modularly compile and combine frequent algorithms within the cryptography area, together with numerous hash features, digital signatures, and so forth., to assemble testing circuits in numerous growth environments (3) primarily based on the aforementioned unit testing circuits, comprehensively consider common ZKP growth instruments throughout totally different parameters reminiscent of curves, {hardware}, and so forth., together with runtime, proof dimension, RAM (4) construct built-in testing circuits to additional estimate related metrics of advanced methods and the estimated value consumption for deployment on particular blockchain networks.Yu GuoSECBIT Labs. and The Hong Kong Polytechnic UniversityComparison of Multilinear Polynomial Dedication SchemesA polynomial dedication scheme is a strong cryptographic device that allows a prover to commit a polynomial to a succinct worth, and later permits a verifier to verify claimed evaluations of the dedicated polynomial. Multilinear polynomial dedication schemes are vital in lots of purposes reminiscent of SNARKs (succinct non-interactive argument of data) and lookup arguments. There have been quite a few constructions of multilinear polynomial commitments that exhibit wonderful efficiency in numerous features. Nonetheless, there’s a lack of benchmark comparisons for these strategies. On this venture, we purpose to supply a complete comparability of various multilinear polynomial dedication schemes, together with their effectivity, safety assumptions, the price of supporting zero-knowledge prosperity, batching efficiency, and so forth. Our findings can provide clear steering for builders in choosing the suitable multilinear polynomial dedication for various eventualities.Mirror TangSalusA Safety framework for zkSNARKs growth and auditThis venture goals to develop a complete zkSNARKs safety framework for the Ethereum group, culminating in a analysis paper. It focuses on analyzing zk safety vulnerabilities, reminiscent of Layer 2 scaling and blockchain compression, with the objective of making an open-source vulnerability database. The framework will present builders with theoretical assist and sensible steering, together with circuit implementation, protocol design, and cryptographic primitives. Outcomes embrace the event of an open-source safety framework, dissemination of technical paperwork and tutorials, and enhancements to the safety infrastructure and purposes of zkSNARK know-how, finally contributing to the robustness and safety requirements of the Ethereum ecosystem.