theory and practice of zk-snarks

1dfa2bb34977b1db41d0d46d4505183f?s=47 Osuke
November 10, 2018
Technology
5
4k

theory and practice of zk-snarks

1dfa2bb34977b1db41d0d46d4505183f?s=128

Osuke

November 10, 2018
Tweet

More Decks by Osuke

See All by Osuke
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
2
2.8k
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
3
300
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
9
1.8k
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
1
930
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
3
2k
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
1
320
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
1
510
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
5
1.1k
1dfa2bb34977b1db41d0d46d4505183f?s=48 osuke
0
470

Other Decks in Technology

See All in Technology
8aba6de431668fc8d09977c0e33c63c1?s=48 jaguar_imo
0
130
5b392dc79d5b6d1dab580bf60e26fb7c?s=48 nitya
0
150
5e25aec60358948cd53cfcdfd3714c6b?s=48 weblyzard
1
2k
84907687e50c8ac2a09b02e0d1b36ab1?s=48 toricls
12
2.5k
E8f618bf29b36a046d01e235071b2ac3?s=48 trafficbrain
0
490
0102ef8594b9d3a74f45dfd5daa5ede4?s=48 yskmjp
0
170
A97eee01397705443a72a48ce29d3e19?s=48 cybozuinsideout
0
210
23190387d424e33d6a1a807cea1e0469?s=48 osamtimizer
1
350
0620564f0125b8b3b7f4fe40c10b8b4e?s=48 tattn
2
260
9e7a653ed313b3da4b263a772bfc5026?s=48 clustervr
0
160
380bcd2ab751f5838abd8219df53e5fe?s=48 tomoki10
0
1k
5af8e5bd2f24e4ea0cee732c6cc259b3?s=48 haruharuharuby
0
210

Featured

See All Featured
3d4519fd34b76fb265fc0237f3792bd4?s=48 danielanewman
1
340
96270e4c3e5e9806cf7245475c00b275?s=48 addyosmani
1348
190k
D09fad3e36ae6841f54820be0e907f7a?s=48 rocio
155
11k
F68cb25ae3e5c2106997454b13b7737d?s=48 brad_frost
154
6.2k
7c8469ee8c9e594c65c59b919626c08d?s=48 scottboms
250
11k
78b475797a14c84799063c7cd073962f?s=48 holman
448
130k
465724d73fe3a92c0879fdfb43a3a6f3?s=48 philhawksworth
190
8.7k
C51b39fa3c79ccb99dcb8a076bc98287?s=48 brianwarren
82
4.6k
E190023b66e2b8aa73a842b106920c93?s=48 zenorocha
296
39k
433acaea1012b25d97ae66da9b998dad?s=48 malarkey
118
15k
C9b18d9dff88a9dd2393364c2b3b21bd?s=48 colly
185
14k
78b475797a14c84799063c7cd073962f?s=48 holman
458
270k

Transcript

  1. [L4/"3,Tͷཧ࿦ͱԠ༻ 0TVLF4VEP-BZFS9*OD /PW

  2. "CPVU.F 0TVLF ![PPN@[PPN[P -BZFS93FTFBDIFS&OHJOFFS ࠷ۙ͸4/"3,T45"3,T԰

  3. "HFOEB w *OUSPEVDUJPOGPS[L4/"3,T w %JWFJOUP[L4/"3,T w 7FSJpBCMFGPSNBMWFSJpDBUJPOPGTNBSUDPOUSBDUT

  4. *OUSPEVDUJPOGPS[L4/"3,T

  5. ;FSP,OPXMFEHF1SPPG w ͋Δ໰୊ͷղΛ஌͍ͬͯΔ͜ͱΛʮೖྗ஋ʯΛ໌Β͔ʹͤͣʹ
 ʮ஌͍ͬͯΔࣄ࣮ʯ͚ͩΛূ໌͢Δɻ w ύεϫʔυࣗମ͸໌Β͔ʹ͠ͳ͍ͰɺύεϫʔυΛ஌͍ͬͯΔࣄ࣮ ͚ͩΛূ໌͢Δɻ w JOQVUYΛ໌Β͔ʹͤͣʹɹɹɹɹͱͳΔYΛ஌͍ͬͯΔ͜ͱΛূ໌ f(x)

    = y

  6. ;FSP,OPXMFEHF1SPPG w $PNQMFUFOFTTɿ w 1SPWFSͷ͍࣋ͬͯΔ໰୊͕ਅͰ͋ΔͳΒ͹ɺ7FSJGZFS͸ਅͰ͋Δ͜ͱ͕ ඞͣΘ͔Δ͜ͱɻ w 4PVOEOFTTɿ w 1SPWFSͷ͍࣋ͬͯΔ໰୊ِ͕Ͱ͋ΔͳΒ͹ɺ7FSJpFS͸͔ͳΓߴ͍֬཰

    ͰͦΕِ͕Ͱ͋Δͱݟൈ͚Δ͜ͱɻ w ;FSPLOPXMFEHFɿ w ͋Δ໰୊ͷղΛ஌͍ͬͯΔ͜ͱΛʮೖྗ஋ʯΛ໌Β͔ʹͤͣʮ஌͍ͬͯ Δࣄ࣮ʯ͚ͩΛূ໌͢Δɻ

  7. [L4/"3,T w [Lɿθϩ஌ࣝ w /PO*OUFSBDUJWFɿඇର࿩త w 4VTTJODUɿNTΦʔμʔͰݕূՄೳ w 1SPPG4J[F͕ඇৗʹখ͍͞ʢ਺ඦ#ZUFʣ
 ϒϩοΫνΣʔϯͱ૬ੑ͕ྑ͍

    1SPWFS 7FSJpFS 1SPPG

  8. 4IJFMEFE5SBOTBDUJPO [$BTI 'SPN  5P  "NPVOU 5Y ΦϯνΣʔϯͰ[L4/"3,TΛ༻͍ɺ5Y͕ਖ਼౰Ͱ͋Δࣄ࣮͚ͩΛ఻೻ 1SPWJOH

    7FSJGZJOH QSPPG

  9. [L4/"3,TPO&UIFSFVN #Z[BOUJVN6QEBUFͰCO"EE CO4DBMBS.VM CO1BJSJOHͷ௥Ճ 4/"3,Tͷݕূʹඞཁͳପԁۂઢ CO ্ͷԋࢉΛ1SFDPNQJMF $POTUBOUJOPQMF6QEBUFͰ(BT$PTUͷ࡟ݮΛ༧ఆ &7.֎Ͱԋࢉ͢Δ͜ͱͰ(BTΛݻఆͯ͠͠·͏ SFG<>IUUQTFJQTFUIFSFVNPSH&*14FJQ

  10. 0VUTPVSDJOHBDPNQVUBUJPO ܭࢉॲཧೳྗ͕ߴ͍P⒎DIBJOͷαʔόʔʹܭࢉΛҕৡ ൿಗԽٕज़Ͱ͸ͳ͘εέʔϦϯάٕज़ͱͯ͠4/"3,TΛ׆༻ ϒϩοΫνΣʔϯ 1SPPG 4UBUF4 4UBUF4A 1SPWFS

  11. 4/"3,T45"3,T#VMMFUQSPPGT 5PYJDXBTUF GSFF 1SPPGUJNF 7FSJGZUJNF 1SPPGTJ[F 4/"3,T /P T NT

    d# 45"3,T :FT dT dNT d # #VMMFUQSPPGT :FT dT dNT d# SFG<>[DBTIBUEFWDPO [DBTIͷTIJFMEFEUSBOTBDUJPO

  12. %JWFJOUP[L4/"3,T

  13. 0WFSWJFX4/"3,TTDIFNF 1SPWFS 7FSJpFS #BTFEPO1JOOPDIJP<1()3> GVODUJPO DJSDVJU HFOFSBUPS PODF LFZ HFOFSBUPS

    DJSDVJU QSPWJOH LFZ WFSJpDBUJPO LFZ BOZOVNCFSPGUJNFT XJUOFTTNBQ TJNVMBUF QVCMJD JOQVU QSJWBUF JOQVU GVODUJPO BTTJHONFOU  TFUVQ QSPPG SFG<>4/"3,TGPS$7FSJGZJOH1SPHSBN&YFDVUJPOT4VDDJODUMZBOEJO;FSP,OPXMFEHF QVCMJD JOQVUTJ[F εϚʔτίϯτϥΫτ

  14. 4FUVQ3$4 3BOL$POTUSBJOU4ZTUFN f(x) = x3 + x + 5 f(x)

    = 35 ͱͳΔ੍ݶΛຬͨ͢DPOTUSBJOUTΛ࡞͍ͬͯ͘       x SFG<>2VBESBUJD"SJUINFUJD1SPHSBNTGSPN;FSPUP)FSP TB TCTD POF JOQVU PVUQVU D D D ֻ͚ࢉPS଍͠ࢉͷ੍໿

  15. 4FUVQ2"1T 2BESBUJD"SJUINFUJD$JSDVJUT ଟ߲ࣜʹม׵͢Δ͜ͱͰશͯͷDPOTUSBJOUTΛҰؾʹܭࢉͯ͠͠·͏ SFG<>2VBESBUJD"SJUINFUJD1SPHSBNTGSPN;FSPUP)FSP ͦΕͧΕͷDPOTUSBJOUTΛଟ্߲ࣜͷ఺ͱଊ͑ɺ ϥάϥϯδϡิؒͳͲͰ෮ݩ ͦΕͧΕ఺͔Β࣍ࣜΛ෮ݩ YΛ୅ೖ͢Ε͹લͷεϥΠυͱಉ͡ DPOTUSBJOUT਺ͷ࠷খଟ߲ࣜ; Y

     Y Y Y Y ͰׂΓ੾ΕΔ ݕূ͸ɺ͜ͷଟ߲ࣜΛςΩτʔͳYU͚ͩͰධՁͯ͠ߦ͏

  16. 4FUVQ2"1T 2BESBUJD"SJUINFUJD$JSDVJUT "QPMZOPNJBMT <   > <  

    > <   > <   > <   > <   > ࠷ऴతͳ2"1͸ଟ߲ࣜ܎਺ͷঢॱϕΫτϧ #QPMZOPNJBMT <   > <   > <   > <   > <   > <   > $QPMZOPNJBMT <   > <   > <   > <   > <   > <   > A1 (x) = 0.833x3 − 5x2 + 9.166x − 5 ࣮ࡍ͸༗ݶମԋࢉ

  17. ,P& ,OPXMFEHFPG&YQPOFOU"TTVNQUJPO 1JOOPDIJPͰ͸҉߸ֶతͳ೿ੜԾఆΛར༻ͯ͠ূ໌Λੜ੒͢Δ ପԁۂઢ্ͷ఺ 1J 2J  3 4 ʹ͍ͭͯɺൿີ஋Lʹରͯͦ͠ΕͧΕ2JL1Jͷͱ͖

    4L3ʹͳΔʢ3 4 ͸ 1J 2J ͷઢܗ࿨Ͱ͔͠ද͢͜ͱ͕Ͱ͖ͳ͍ 4L3Ͱ͋Δ͜ͱࣗମ͸LΛ஌ΒͣʹϖΞϦϯάͰݕূՄೳɻ LΛ஌͍ͬͯΔͱઢܗ࿨Ͱද͢͜ͱͳ͘ 3 L3 ͕࡞Εͯ͠·͏ʜɻ ͜ͷൿີ஋L͕UPYJDXBTUFͰ͋ΓUSVTUFETFUVQͷඞཁੑʹܨ͕Δ R = P1 i1 + P2 i2 + ⋅ ⋅ ⋅ , S = Q1 i1 + Q2 i2 + ⋅ ⋅ ⋅ e(R, Q) = e(P, S) J   ʜ

  18. 7FSJpDBUJPOPGTOBSLTQSPPG ͭͷϖΞϦϯάʹΑΓݕূΛߦ͏ ྫ͑͹ɺ1SPWFS͕ଟ߲ࣜ" U ͷίϛοτϝϯτΛ஌͍ͬͯΔ͜ͱͷݕূ e(πa , VKa ) =

    e(G, π′ a ) 4FUVQ
 QSPWJOHLFZ
 WFSJGZJOHLFZ
 UPYJDXBTUF 1SPPG PKa,i = Ai (t) ⋅ G t, ka VKa = ka G PK′ a,i = Ai (t) ⋅ G ⋅ ka πa = Σ ⃗ si PKa,i π′ a = Σ ⃗ si PK′ a,i " U ͷίϛοτϝϯτ͕ਖ਼͍͠ൣғͰ ઢܗ࿨͕࡞ΒΕ͍ͯͳ͍ͱ ,P&ʹΑΓݕূ͕௨Βͳ͍ P = G, Q = VKa , R = πa , S = π′ a T͸ݕূऀʹ͸෼͔Βͳ͍ FYTdT·Ͱ͔͠༩͑ͯͳ͍

  19. 1()3XIBU`TMFGU w ಉ༷ʹɺଟ߲ࣜ#ɺ$ʹ͍ͭͯͷίϛοτϝϯτݕূ w ͦΕͧΕͷXJUOFTTൣғΛૢ࡞͢Δ͜ͱͰݕূΛෆਖ਼ʹύε͠Α͏ͱ͍ͯ͠ͳ͍͔ w ଟ߲ࣜ"ɺ#ɺ$ͷઢܗ࿨܎਺͕ͦΕͧΕಉ͔͡ w ͦΕͧΕҟͳΔXJUOFTTΛ༩͑Δ͜ͱͰݕূΛෆਖ਼ʹύε͠Α͏ͱ͍ͯ͠ͳ͍͔ w

    " #$) ;Λຬ͔ͨ͢ w ͜ΕΛຬͨ͢͜ͱ͕ʮݩͷ໰୊ʯ͕ਅͰ͋Δ͜ͱΛࣔ͢ w QVCMJDJOQVUʹجͮ͘ݕূ伴ͷੜ੒ w ύϥϝʔλʔͷΑ͏ʹಇ͘ʢݕূ伴αΠζ͕૿͑ͯ͠·͏ʣ w 1SPWFSͷBTTJHONFOUͷൿಗԽ w ଞͷ"` #` $` )`͕" # $ )Ͱ͸ͳ͍৘ใͷൿಗԽ w ଟ߲ࣜ"ɺ#ɺ$ʹͦΕͧΕʹϥϯμϜ஋ΛՃ͑Δ w ඇରশϖΞϦϯάʹΑΔޮ཰ԽͳͲ<#$57>

  20. 7FSJpBCMF'PSNBM7FSJpDBUJPOPG4NBSU$POUSBDUT

  21. 4/"3,TPWFS'PSNBM7FSJpDBUJPO w ໰୊ఆٛ w εϚʔτίϯτϥΫτͷηΩϡϦςΟ͕େ͖ͳ՝୊ w ܗࣜతݕূʹΑΔεϚʔτίϯτϥΫτͷ࢓༷ఆٛʹΑΔղܾࡦ w PODIBJOͰ͸ͦͷεϚʔτίϯτϥΫτ͕ܗࣜతݕূ͞Ε͔ͨ൑அ͢Δ͢΂͕ ͳ͍

    w ղܾࡦ w ܗࣜతݕূΛ4/"3,TΛ༻͍ͯP⒎DIBJOʹΞ΢τιʔε͠ɺͦͷίϯτϥΫτ ͕͔֬ʹܗࣜతݕূ͞Εͨࣄ࣮ΛPODIBJOʹه࿥͢Δ w ͭͷϓϩτίϧྫ w ίϯτϥΫτ͕ݺͼग़͢ίϯτϥΫτͷܗࣜతݕূνΣοΫ w Ϣʔβʔ͕ݺͼग़͢ίϯτϥΫτͷܗࣜతݕূνΣοΫ

  22. 1SPUPDPMFYNBQMFT w ίϯτϥΫτࢀরͷηΩϡϦςΟ޲্ w PODIBJOͷίϯτϥΫτ͕$"--͢ΔίϯτϥΫτ͕ܗࣜతݕূ͞ΕͯΔࣄ࣮Λূ໌ ͢Δ w 4UBCMF$PJO΍EFSJWBUJWFTTZTUFNʹ୲อ͞Ε͍ͯΔ&3$τʔΫϯʹPWFSqPX΍ SFFOUSBODZ͕ͳ͍ͱܗࣜతݕূ͞ΕͨίϯτϥΫτͷΈ୲อՄೳʹ͢Δϓϩτίϧ w

    ΢ΥϨοτϒϥ΢βࢀরͷηΩϡϦςΟ޲্ w ΢ΥϨοτ΍%BQQϒϥ΢β͕ίϯτϥΫτΛݺͼग़͢ͱ͖ʹɺܗࣜతݕূ͞Ε͍ͯ Δ͔νΣοΫ w ੬ऑੑ͚ͩͰͳ͘ɺ1MBTNB΍4UBUF$IBOOFMίϯτϥΫτ͕ʮඪ४ن֨ʯʹԊͬͯ ͍Δ͔ܗࣜతݕূΛߦ͏ w ϒϩοΫνΣʔϯʹ͓͚ΔIUUQTͷΑ͏ʹಈ࡞͢Δ w ʮ8BSOJOHΞΫηε͍ͯ͠Δ1MBTNBίϯτϥΫτ͸ඪ४ن֨ʹ४ڌ͍ͯ͠·ͤ Μɻʯ

  23. 0WFSWJFXPGTOBSLTPWFS'7 'PSNBM 7FSJpDBUJPO 1SPHSBN 3". $JSDVJU 7FSJpFS $POUSBDU 4FUVQ 1SPWFS

    0UIFS $POUSBDUT EBQQ CSPXTFST 'SPOUFOE #BDLFOE 0ODIBJO 0⒎DIBJO

  24. 5JOZ3". 3". 3BOEPN"DDFTT.BDIJOF ϨδελͱϝϞϦ͕͋ΔܭࢉϞσϧ SFGIUUQTXXXTDJQSMBCPSHEPD5JOZ3".TQFDQEG ϓϩάϥϜʹରͯ͠ɺਖ਼͘͠$16ͷঢ়ଶભҠͤ͞Δ͜ͱͷz੍ݶz͕DJSDVJUͱͳΔ VOCPVOEFEͳλΠϜεςοϓ΍࠶ؼΛؚΉϓϩάϥϜ΋DJSDVJUʹͰ͖Δ൓໘ɺ DJSDVJUͷαΠζ͕ͱͯ΋େ͖͘ͳͬͯ͠·͏ɻ શͯͷPQDPEFʹରͯ͠DJSDVJU͕ධՁ͞ΕΔͨΊɺ 5JOZ3".Ͱ͸PQDPEFΛݸʹ5JOZʹʢͦΕͰ΋΍͹͍ʣɻ