blocksight 2021-04-26 20:07:21 阅读数:562

本文一共[544]字，预计阅读时长:1分钟~

mathematics
blockchain
zero
knowledge
proof

In the last introduction RSA Accumulator Non member proof and application in blockchain , Some of the details didn't unfold , For example, why use prime factors ？ Because their product will uniquely represent the set . otherwise , There will be confusion 【 The same product , There will be different combinations of factors , Such as 18 = 2 * 9 = 3 * 6】 wait .

Up to now , There's a signature , Cryptography promises , Homomorphic computation , Elliptic curve and so on , Next, we can see the specific content of zero knowledge proof . This article belongs to popular science , Compared with the previous , Happy reading does not burn the brain ！

Generally speaking, zero knowledge proof makes the verifier believe by some means （ confirm ） The witness's statement is correct （ For example, knowing some key information ）, Without exposing the information itself . There are many examples on the Internet to help understand , Here's a scene ： If V Found a lost bank card ,P Come and say that the bank card is his , And said he knew the bank card number and password , Because the bank card is V In the hands of ,V It's easy to judge P Is the card number correct , however V I still don't believe it P It's the owner of the card , therefore P He also said that he knew the withdrawal code of the bank card , But I can't tell you directly V Otherwise, it will be leaked . So they agreed , Come to the nearby ATM By the machine ,V leave ATM Keep a certain distance from the plane , To make visible P Perform the withdrawal operation , But not so close as to see P The withdrawal code you entered .P It's just ATM Wait by the side V Operation instructions of .

When they're in place ,V Let's take it out 100 element ,P Insert the card , Enter the password and take it out 100 element （ Suppose that Cary is rich ）,V Let's take it out again 300 element ,P Do it and take it out again 300 element , After a few repetitions ,V Make sure the bank card is P Of .

P I got my bank card in this way , Didn't let V Know the withdrawal code , This simulation scenario is the application scenario of zero knowledge proof .

Zero knowledge proof is often used in the following scenarios ：(1） Proof of privacy data ： A person's bank account is more than X; last year , A bank is not associated with an entity Y Make a deal ; A person's credit score is higher than Z; Without exposing the whole DNA Matching on the premise of data DNA

(2） Anonymous Authentication ： Without revealing identity （ Like the login password ）, Prove that the requester R Have access to restricted areas of the site ; Prove that a person comes from a group of allowed countries / A country in the region list / region , But it doesn't reveal which one ; Prove that a person is a member of an organization but not who .（3） Anonymous payment / Tokens, ： In the blockchain （ Untraceable ） Privacy coin ; Payment is completely separated from any kind of display identity ; Paying taxes without disclosing income ;

（4） Outsourcing computing outsources expensive computing tasks , And verify whether the calculation results are correct without re execution ; It opens up a category of zero Trust Computing ; Improve the blockchain model , Do the same calculation from all nodes , To only need one side to calculate and then other nodes to verify and so on ,zk rollup layer2 Plan, etc .

since 1985 year , The concept of zero knowledge proof is in “ Knowledge complexity of interactive proof system ” In this paper, we introduce , Later included non interactive research , In recent years, the research and application of blockchain has developed rapidly . The zero knowledge proof system should satisfy the following properties .

- integrity : Just state (statement) That's right. ,prover You can make verifier Conviction ;
- reliability : If you state (statement) It's wrong. , So cheating prover There's no way to verifier Believe in
- Zero knowledge : The interaction of protocols only exposes statements (statement) Whether it is correct without disclosing any other information

At present, the mature application is zk-SNARK Technical solution . This term means ：

ZK-SNARK Full name :zero-knowledge succinct non-interactive arguments of knowledge

**Succint ( Conciseness )** : Compared with the actual calculated length , The generated zero knowledge evidence message is very small .

**Non-interactive ( Non interactivity )** : about zk-SNARK Algorithm , There is usually a build phase , After the build phase is complete , Certifier (prover) Just report to the verifier (verifier) Just send a message . and ,SNARK There's usually another one called " Public verifier " Characteristics of , It means that anyone can verify zero knowledge evidence without any interaction , This is crucial to blockchain .

**Arguments ( Controversial )** : The verifier can only resist the attack of the verifier with limited computing power . The prover with enough computing power can create forged zero knowledge evidence to deceive the verifier . This is also often called " Computational completeness (computational soundness)", instead of " Perfect integrity (perfect soundness) ".

**of Knowledge** : For a certifier , Without knowing the specific proof (witness) Under the premise of , It is impossible to construct an effective zero knowledge evidence .

In any zero knowledge proof system , There is one. prover Let... Without divulging any additional information verifier Be sure of certain statements （Statement） That's right. .

ZK-SNARK At present, it is widely used , There are many mature Libraries , Such as libsnark,bellman etc. . Some don't need to setup Of zk-stark The plan , Let's talk about it later .

Okay , Next, we'll go on to zero knowledge proof ！.

Link to the original text ：https://mp.weixin.qq.com/s/LHuRAA1RPzbccKHZ1wdU6g Welcome to the official account ：blocksight

Mathematics in blockchain - RSA Non member proof of accumulator RSA Accumulator Non member proof and blockchain applications

Mathematics in blockchain - Accumulator( accumulator ) Accumulator and RSA Accumulator

Mathematics in blockchain - Kate promise batch opening Kate Promise volume Certification

Mathematics in blockchain - I promise Knowledge and commitment

Mathematics in blockchain - Pedersen Key sharing Pedersen Key sharing

Mathematics in blockchain - Pedersen promise Cryptography promises --Pedersen promise

Mathematics in blockchain - Inadvertently transmit Oblivious transport protocol

Mathematics in blockchain - RSA Algorithm encryption and decryption process and principle RSA Encryption and decryption algorithm

Mathematics in blockchain - BLS Threshold signature BLS m of n Threshold signature

Mathematics in blockchain - BLS Key aggregation BLS Key aggregation

Schorr Signature and elliptic curve Schorr Signature and elliptic curve

Mathematics in blockchain -Uniwap Automated market maker core algorithm analysis Uniwap Core algorithm analysis （ in ）

版权声明：本文为[blocksight]所创，转载请带上原文链接，感谢。 https://netfreeman.com/2021/04/20210426150133209k.html

- In depth analysis of the basic components of the defi loan agreement
- 美SEC指控区块链信贷公司非法出售超3000万美元证券
- 深度 | 巴菲特在数字资产的估值中错过了什么？
- The US SEC accused blockchain credit companies of illegally selling securities exceeding US $30 million
- What did Buffett miss in the valuation of digital assets?
- Solana上的跨链生态
- 广东省税务局区块链出口退税业务成功上线
- 区块链50收评 | 成分股涨跌不一 两极分化明显
- 新闻周刊 | 以太坊主网完成伦敦升级
- Cross chain ecology on Solana
- Guangdong provincial taxation bureau successfully launched the blockchain export tax rebate business
- Blockchain 50 closing comments | component stocks did not rise or fall significantly
- Newsweek - Ethereum main network upgraded in London
- 区块链大有前途，数字货币不会消失
- Blockchain has great prospects, and digital currency will not disappear
- 区块链中很重要的10个项目
- 解析去中心化衍生品三大流派：能否撼动中心化交易所地位？
- 技术周刊｜伦敦升级后以太坊平均每分钟燃烧2.36ETH
- 数字人民币本质上不也是人民币吗，为什么说能挑战美元霸权？
- 10 important projects in the blockchain
- Analyzing the three schools of decentralized derivatives: can we shake the status of centralized exchanges?
- Techweek London upgraded Ethereum burns an average of 2.36 eth per minute
- Isn't digital RMB also RMB in essence? Why can it challenge the hegemony of the US dollar?
- Blockchain practice (II) realization of pow workload proof | 15th day of settlement
- 外媒：美国新的比特币税收计划可能扼杀更环保的区块链技术
- Foreign media: the new bitcoin tax plan in the United States may stifle more environmentally friendly blockchain technology
- 【geth】Go调用智能合约 | 一起来学区块链
- 【geth】Go语言调用以太坊 | 一起来学区块链
- [get] go invokes the smart contract | together with the school district block chain
- [get] go language calls Ethereum | together with the school district block chain
- EIP-1559实施后 Gas为什么没有剧烈下降
- Why didn't gas drop sharply after the implementation of eip-1559
- 以太坊伦敦升级已完成 矿工有哪些注意事项?
- Ethereum London upgrade has been completed. What should miners pay attention to?
- 项目周刊｜以太坊在两天内销毁了新币发行量的36%
- Project weekly Ethereum destroyed 36% of the circulation of new coins in two days
- 加密企业如何通过区块链认证绿色能源？
- How can encryption enterprises certify green energy through blockchain?
- 从SEC主席最新演讲谈数字货币行业风控
- On risk control of digital currency industry from the latest speech of SEC Chairman
- DeFi 龙头的再进化之旅：纵览 Uniswap V3 生态全景
- The re evolution journey of defi leader: an overview of uniswap V3 ecology
- 英国拍卖行佳士得拍卖 Cryptopunks、Meebits、Bored Apes NFT
- 卡尔达诺报告：在 Wave Financial Group 的支持下实现完全中心化和全球金融普惠
- NFT，开启“元宇宙”的钥匙
- 以太坊燃烧第一个24小时：中文社区在关心什么
- British auction house Christie's auctions cryptopunks, meebits, bored apes NFT
- Caldano report: complete centralization and global financial inclusion with the support of wave financial group
- NFT, the key to the "meta universe"
- Ethereum burning for the first 24 hours: what does the Chinese community care about
- 趣币早报 |美国阻止财政部挑选加密货币的赢家和输家
- Qu coin morning post | the United States prevents the treasury from selecting the winners and losers of cryptocurrency
- 区块链 公钥 私钥 生成地址 关系
- Address relationship generated by blockchain public key and private key
- 如何实现去中心化跨链消息传递和资产转移？
- 以太坊伦敦升级：随之生效的以太坊EIP-1559是什么
- Tokemak能否支配更多DeFi流动性
- How to achieve decentralized cross chain messaging and asset transfer?
- Ethereum London upgrade: what is Ethereum eip-1559 in effect
- Can tokemak dominate more defi liquidity