2 ms·
This discusses a weakness with all zero knowledge proofs which require a trusted setup. Zero knowledge proofs which don’t require a trusted setup include BCCCG
by paulgerhardt 8y ago
This discusses a weakness with all zero knowledge proofs which require a trusted setup.
Zero knowledge proofs which don’t require a trusted setup include BCCCGP[1], Bullet Proofs[2], ZKBOO++[3], Ligero[4], Hyrax[5], ZK-STARKs[6], and Aurora[7].
[1]https://eprint.iacr.org/2016/263.pdf https://eprint.iacr.org/2016/263.pdf
[2]https://eprint.iacr.org/2017/1066.pdf https://eprint.iacr.org/2017/1066.pdf
[3] https://eprint.iacr.org/2017/279.pdf https://eprint.iacr.org/2017/279.pdf
[4] https://acmccs.github.io/papers/p2087-amesA.pdf https://acmccs.github.io/papers/p2087-amesA.pdf
[5] https://eprint.iacr.org/2017/1132.pdf https://eprint.iacr.org/2017/1132.pdf
[6] https://eprint.iacr.org/2018/046.pdf https://eprint.iacr.org/2018/046.pdf
[7] https://eprint.iacr.org/2018/828.pdf https://eprint.iacr.org/2018/828.pdf
To clear up confusion in the comments, the new ZCash release, sappling, used a trusted setup with 87 people up from the original six[8].
[8] https://z.cash/blog/completion-of-the-sapling-mpc/ https://z.cash/blog/completion-of-the-sapling-mpc/