[Resource Topic] 2021/710: VOProof: Efficient zkSNARKs from Vector Oracle Compilers

Welcome to the resource topic for 2021/710

Title:
VOProof: Efficient zkSNARKs from Vector Oracle Compilers

Authors: Yuncong Zhang, Alan Szepieniec, Ren Zhang, Shifeng Sun, Geng Wang, Dawu Gu

Abstract:

The design of zkSNARKs is increasingly complicated and requires familiarity with a broad class of cryptographic and algebraic tools. This complexity in zkSNARK design also increases the difficulty in zkSNARK implementation, analysis, and optimization. To address this complexity, we develop a new workflow for designing and implementing zkSNARKs, called \mathsf{VOProof}. In \mathsf{VOProof}, the designer only needs to construct a \emph{Vector Oracle (VO) protocol} that is intuitive and straightforward to design, and then feeds this protocol to our \emph{VO compiler} to transform it into a fully functional zkSNARK. This new workflow conceals most algebraic and cryptographic operations inside the compiler, so that the designer is no longer required to understand these cumbersome and error prone procedures. Moreover, our compiler can be fine-tuned to compile one VO protocol into multiple zkSNARKs with different tradeoffs. We apply \mathsf{VOProof} to construct three general-purpose zkSNARKs targeting three popular representations of arithmetic circuits: the Rank-1 Constraint System (R1CS), the Hadamard Product Relation (HPR), and the \mathsf{PLONK} circuit. These zkSNARKs have shorter and more intuitive descriptions, thus are easier to implement and optimize compared to prior works. To evaluate their performance, we implement a Python framework for describing VO protocols and compiling them into working Rust code of zkSNARKs. Our evaluation shows that the \mathsf{VOProof}-based zkSNARKs have competitive performance, especially in proof size and verification time, e.g., both reduced by roughly 50\% compared to \mathsf{Marlin} (Chiesa et al., EUROCRYPT 2020). These improvements make the \mathsf{VOProof}-based zkSNARKs more preferable in blockchain scenarios where the proof size and verification time are critical.

ePrint: https://eprint.iacr.org/2021/710

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .