emmorais

4 ms·

1. 1.▲
   by emmorais 4y ago

   It depends on which backend you want to use (currently Groth16 or Nova, but more options can be implemented). For example, Nova proof is roughly 8-9 KB. In this situation we have that verification is not constant, for instance, for 2^20 con
2. 2.▲
   by emmorais 4y ago

   Proof size and verification time would be constant (therefore efficient) for all cases. Not using a friendly signature scheme would in principle cause a big increase in proving time. The same situation happens if you want to use something d
3. 3.▲
   by emmorais 4y ago

   Proving correct evaluation of FHE circuits is indeed a nice example of how Lurk can help. We are considering different possibilities regarding FHE, but not as a priority.
4. 4.▲
   by emmorais 4y ago

   Indeed zk-STARK addresses it, but it is not the only alternative (Bulletproofs, Nova, Halo2 also doesn't require a trusted setup). All zk-SNARKs need some kind of intermediate representation that looks like a circuit, then this charact