3 ms·
I'd call Pinocchio [PGHR13] the first truly practical zk-SNARK and Groth16 close to being the endgame of pairing-based SNARKs. The difference between earlier co
by madars 3y ago
I'd call Pinocchio [PGHR13] the first truly practical zk-SNARK and Groth16 close to being the endgame of pairing-based SNARKs. The difference between earlier constructions and Groth16 (in proof size/prover complexity/verifier complexity) is less than 2x: https://github.com/scipr-lab/libsnark/blob/master/libsnark/zk_proof_systems/ppzksnark/README.md https://github.com/scipr-lab/libsnark/blob/master/libsnark/z...
- matthewdgreen 3y agoWe academically wrote (2014) and then deployed Zcash (2016) using PGHR13, and then later Zcash upgraded to a better circuit that used Groth16. It was, to my knowledge, the first production system to use SNARKs, and “modern” systems like Tornado Cash Nova use basically the same ideas. ETA: I just noticed I'm responding to Madars ;)