From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 28 Aug 2024 08:36:02 -0700 Received: from mail-yb1-f185.google.com ([209.85.219.185]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1sjKiI-0005hM-E8 for bitcoindev@gnusha.org; Wed, 28 Aug 2024 08:36:02 -0700 Received: by mail-yb1-f185.google.com with SMTP id 3f1490d57ef6-e035949cc4esf12983159276.1 for ; Wed, 28 Aug 2024 08:36:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1724859356; x=1725464156; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:sender:from :to:cc:subject:date:message-id:reply-to; bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=; b=TQk6gj4/3q5HdmvET1wx47s+es5HLQoPGJL58At0oRtB+GCn8Q24snfAT6yvnTjKPD Bm0O3sdSuwkxwPTDcxhHgQiRUsjgo30L8KjRDrDF3rTCoFGoYf4wzPud8rl6NSKGLvHo Dk1LY5rcltVMwLdjlox9dR6CxuHOgQJgfxvWBr07hqhSJ5p9c03BDY3KsmdfTz+VUCEE LecIkwY1oRvLc7PTuvsikVKHHGRwwAXoZuzGkSJjDnKpwLUNzqXc4g9X5YjLtG65nsRz ItJgzWjx3nF2whB8KHyUxBNrJ7z7/xQElSTEF5qKYkBjXpMNqkLsjBSHRqabKj1v61sy C49A== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1724859356; x=1725464156; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:from:to:cc :subject:date:message-id:reply-to; bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=; b=WKGMcLklvOqi4zv9PJ9o11wJadw/gFZ+XKCfrdplcY+yVOscdPMzXH3R4XbnZDsd4q NBTsvBOAti32067Zaq5PtAWrJ/z8D31ZQ/iBrXXrvAojK6OH3Zi/yWLHI9qEZpFFGO2w uQENoF2qQJ02qERK5UAoyShIMTss6tpwyF2BNKA4ZhbnpTv+YWSybnpD8WJ1NXAVFQUW pNibVXilaMjU0u55IXRQ/vXXN0BXJnTP3pmVEfm539TS+/a+sYH4FIv4rcrpGAMveCBT cjPY5wzL8FIZ89z6J6EI00tkuYZKYR9wonZBQ72k/+nMAWJlE/P/W/G2VYE3FgJ1FqY6 E7uA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1724859356; x=1725464156; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to; bh=bqPIJ9EcMgFAei01jczLOi4W5vX5kZxZpLCKkAbFAIY=; b=UT9LdKoSUcLzWJ5ODZmMqQc6b7+dacRxNgHTuIREZsb+RMfkb9obvBA7xHnE2E/QYr 75cNdBr1/pDdiMepaC7sBMI2YdUb0LLFuAPq3wLpiOSjQPeEihvkO/PZE6jQijgD/1Xg xsgE6LDzqWaFgIYn2tXssmsbgk8eNheu3ui3Pwe1A7LDbHuPzSxixrtVsi1++uXa7zRe aHcSrNm5OQ+lXpvqX4gEYpO8dURAG9WADQ8PypciLhslJ8Eg2wTsdqdSbSWUd38DeiEW CDq+LfszrleM+o3DIzZ8bEquqmWF806VM9mLkC7wOi2orlEnf3fz7iaJnA/rtiBV3n0t IShQ== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=1; AJvYcCWegP3rMf9FJbYlSSwnV4k71YDr2BnlIKn8vdTQmVCmCLHTuU9vNDuFIiG6IFo/14mUZi9de2md6/A3@gnusha.org X-Gm-Message-State: AOJu0YwRUk9OGCvfGKP7lxQDob9K5YuLQKX/7nwx0fQOP4mf6ZCvCzBc pyfkq5x+lFfk+XfmQIP9PpNkz2nBvwW+rQsjOPdXpph6TyUZ+zuj X-Google-Smtp-Source: AGHT+IEVWKvlARzEMehd1BEugUcRub9YuSEHc69JmeDFohF/ZvX14ayGvJTD/LKae6ilMq89b1HKQg== X-Received: by 2002:a05:6902:102c:b0:e13:ca8d:836f with SMTP id 3f1490d57ef6-e1a45825853mr2833534276.37.1724859355402; Wed, 28 Aug 2024 08:35:55 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com Received: by 2002:a05:6902:1204:b0:e13:df92:d2cc with SMTP id 3f1490d57ef6-e1a5822ef3els45810276.1.-pod-prod-01-us; Wed, 28 Aug 2024 08:35:53 -0700 (PDT) X-Received: by 2002:a05:690c:4812:b0:6b0:d9bc:5a1e with SMTP id 00721157ae682-6c629a00478mr123924897b3.46.1724859353691; Wed, 28 Aug 2024 08:35:53 -0700 (PDT) Received: by 2002:a05:690c:801:b0:66a:8967:a513 with SMTP id 00721157ae682-6d001c5e219ms7b3; Wed, 28 Aug 2024 08:33:59 -0700 (PDT) X-Received: by 2002:a05:690c:620d:b0:6be:523:af4e with SMTP id 00721157ae682-6d1533e1ee6mr19391637b3.19.1724859238916; Wed, 28 Aug 2024 08:33:58 -0700 (PDT) Date: Wed, 28 Aug 2024 08:33:58 -0700 (PDT) From: Weiji Guo To: Bitcoin Development Mailing List Message-Id: <63186352-b441-4548-b7fa-8ff0d5f6fc97n@googlegroups.com> In-Reply-To: <8d3084bc-aece-48ba-a08d-01b53392b64dn@googlegroups.com> References: <93611162-6029-4308-98b5-3c95b30a2ac9n@googlegroups.com> <22162f02-9362-4d1c-b0ce-3cf8dd01bd93n@googlegroups.com> <8d3084bc-aece-48ba-a08d-01b53392b64dn@googlegroups.com> Subject: [bitcoindev] Re: OP_ZKP updates MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_560690_1591753725.1724859238505" X-Original-Sender: weiji.g@gmail.com Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -0.5 (/) ------=_Part_560690_1591753725.1724859238505 Content-Type: multipart/alternative; boundary="----=_Part_560691_649305405.1724859238505" ------=_Part_560691_649305405.1724859238505 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I believe I have found the solution to the open issue mentioned in the=20 earlier email. It is just recursive=20 verification. Instead of publishing each application circuit's verification= =20 key on-chain, we should have=20 only one circuit that OP_ZKP will verify, which is a recursive verifier.=20 Interested readers are welcome to visit the GitHub org dedicated for=20 OP_ZKP: https://github.com/opzkp So far I have just put up the high level ideas=20 here: https://github.com/opzkp/tea-horse. There are nothing else yet. But we will add stuff as we move on. Regards, Weiji On Tuesday, July 23, 2024 at 8:40:08=E2=80=AFAM UTC+8 Weiji Guo wrote: > Yes, that's true. With Dory we will have to work on some pairing-friendly= =20 > curve. Not secp256k1. > > On Tuesday, July 23, 2024 at 3:01:59=E2=80=AFAM UTC+8 Weikeng Chen wrote: > > I need to point out that Dory requires pairing, and therefore it cannot= =20 > work with secp256k1? > Please circle back. > > On Monday, July 22, 2024 at 9:16:18=E2=80=AFAM UTC-5 Weiji Guo wrote: > > =E2=80=94=E2=80=94=E2=80=94What-ifs=E2=80=94=E2=80=94=E2=80=94 > > What if the open issue cannot be resolved? We might consider Dory. It is= =20 > > transparent, requires pairing, and has logarithmic proof size but=20 > concretely larger=20 > > --=20 You received this message because you are subscribed to the Google Groups "= Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoindev+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/= bitcoindev/63186352-b441-4548-b7fa-8ff0d5f6fc97n%40googlegroups.com. ------=_Part_560691_649305405.1724859238505 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I believe I have found the solution to the open issue mentioned in the earl= ier email. It is just recursive=C2=A0
verification. Instead of publishi= ng each application circuit's verification key on-chain, we should have=C2= =A0
only one circuit that OP_ZKP will verify, which is a recursiv= e verifier.=C2=A0

Interested readers are welcome= to visit the GitHub org dedicated for OP_ZKP:=C2=A0https://github.com/opzk= p

So far I have just put up the high level ideas= here:=C2=A0https://github.com/opzkp/tea-horse. There are nothing
else yet. But we will add stuff as we move on.

= Regards,
Weiji

On Tuesday, July 23, 2024 at 8:= 40:08=E2=80=AFAM UTC+8 Weiji Guo wrote:
Yes, that's true. With Dory we will have to = work on some pairing-friendly curve. Not secp256k1.

On Tuesday, July 23, 2024 at 3:01:59=E2=80=AF= AM UTC+8 Weikeng Chen wrote:
I need to point out that Dory requires pairing,= and therefore it cannot work with secp256k1?
Please circle back.=
On Monday, July 22, 2024 at 9:16:18=E2=80=AFAM= UTC-5 Weiji Guo wrote:
<= blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,= 204,204);padding-left:1ex">

=E2=80=94=E2=80=94=E2=80=94What-ifs=E2=80=94=E2=80=94=E2=80=94

What if the open issue cannot be resolved? We might consider Dory. It is= =C2=A0

transparent, requires pairing, and has logarithmic proof size but concre= tely larger=C2=A0

--
You received this message because you are subscribed to the Google Groups &= quot;Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoind= ev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msg= id/bitcoindev/63186352-b441-4548-b7fa-8ff0d5f6fc97n%40googlegroups.com.=
------=_Part_560691_649305405.1724859238505-- ------=_Part_560690_1591753725.1724859238505--