Plasma snapp's very rough explanation

Plasma snappの概要をつかもう

Transcript

1. Plasma snapp ࡶղઆ zk-SNARKsͷྗͰexit game͍ΒͣʹͳͬͨPlasma
2. barryWhitehatͱmiximus miximus͔Βͷroll_up͔Βͷsnapp UnwindingͷIncentivising Plasmaͱexit game DepositͱExitͷ՝୊ͱ؇࿨ Data Availabilityͷ՝୊ͱ؇࿨ SNARK Proofੜ੒ͷίετ 1st/2nd layer cryptoeconomics
3. barryWhitehatͱmiximus
5. 1. Trusted Setup ʢ৴པϕʔεͷΩʔੜ੒ʣ 2. Proof Generation ʢূ໌Λ࡞Δʣ 3. Verification ʢূ໌Λݕূ͢Δʣ SNARKͷखॱ
6. m0t0k1ch1͞Μͷਤղ
7. 1. Trusted Setup:
 ɹBob͸ݱ࣮తʹ͸MPCͰ伴Λ࡞Δ ɹগͳ͘ͱ΋Ұਓ͕伴Λফࣦ͢Ε͹෮ݩෆՄ ɹZcash͕͜ΕͰ΍࣮࣭ͬͯͯσϑΝΫτ
8. 2. Proof Generation: ɹS(ओʹൿີ伴)Λ༻͍ͯ ɹͳΜΒ͔ͷϝοηʔδͷϋογϡΛ࡞Δ ɹ(barry͸merkle rootΛHʹ༻͍Δ͜ͱଟ͠) ɹ ɹpk(proof key)Λ༻͍ͯ ɹproof of correct executionΛ࡞Δ
9. 3. Verification: ɹ#2Ͱ࡞ͬͨprfͱHͦͯ͠ #1Ͱ࡞ͬͨvkͰ ɹProof of Correct Executionͷ ɹ݁ՌͷBoolΛಘΔ
10. barryͷίʔυ͸ਖ਼௚Ԛ͍ ɹɾpk͕Verifierͷείʔϓʹ͋Δʢvk͔͠ݟΕͪΌͩΊʣ ɹɾͭ·ΓߦؒಡΜͰͶతͳϝοηʔδͷ͋Δίʔυ ɹɾ్தͰC++ͷbarryۘ੡ίʔυʹॲཧ͕ҠΔ ɹɾgenWitnessؔ਺͕ProofΛੜ੒ͯͯ͠੹຿͕͵Δ͍
11. iden3ͷ͕JSͩ͠ΩϨΠ ֤ؔ਺ͷ੹຿͕m0t0k0ch1μΠϠάϥϜͱରԠ͍ͯ͠Δ
12. ࢉज़ճ࿏(ΞϦεϝςΟοΫαʔΩοτ) ੜ੒DSL΋࡞ͬͯΔͷͰΑ͛͞ ͜ͷ΁Μ͕QAPͷ ֻ͚ࢉήʔτͬΆ͍
13. ਖ਼௚ #2ͷProof·ΘΓ͕Θ͔ΒΜ
14. Ͱ΋΍͍͖ͬͯ‷( ɾŷɾ) ̑ و
15. Plasmaͱexit game ྫɿ
 Operator͕
 100ԯԁͷUTXOΛੜ੒ͯ͠
 exitਃ੥͢Δ
16. Plasmaͱexit game PlasmaMVPͷMass Exitʢ࿉ۚज़ࢣରࡦʣ
17. Plasmaͱexit game 100ԯԁExit͸
 ۭͬΆͷDepositʹରͯ͠
 ߦΘΕΔ Ϣʔβʔ͕؂ࢹͯ͠Ε͹ ࿉ۚज़ࢣ͸ඞͣϏϦ
18. Ϣʔβʔ͸શTxڽࢹͯ͠ͳ͍ͱΞΧϯ ʢ͔ͩΒPlasmaCash͕ੜ·Εͨʣ
19. MassExitͳ͠ʹPlasmaMVP࢖͑ͨΒ PlasmaCashͷCoinDepositͷ෼ׂͱ͔೰·ͳ͍Ͱ͍͍
20. miximus͔Βͷroll_up͔Βͷsnapp ݁ߏίʔυ࢖͍ճ͠
21. miximus͔Βͷroll_up͔Βͷsnapp StateΛMerkleTrieʹ͢Δ ഑ྻΛτʔφϝϯτߏ଄ʢೋ෼໦ʣʹͯ͠ࢦ໲Λ࢒ٕ͢ Merkleroot (m0t0k1ch1μΠϠάϥϜͷʮHʯ, ͭ·ΓWitness) ΛProofͱڞʹPlasmaContractʹఏग़ Operator͕ StateTrieͷLeafߋ৽ʢ࢒ߴߋ৽ʣʹѱ͞Ͱ͖ͳ͍
22. miximus͔Βͷroll_up͔Βͷsnapp Deposit࣌ʹ͔͠LeafΛ৽ن࡞੒Ͱ͖ͳ͍ Withdrawal׬ྃͨ͠ΒLeafΛ࡟আ͢Δ Deposit BlockͱExit BlockʹஷΊͯΔTx͕ શ෦͸͚͔ͯΒɺStateߋ৽͕Ͱ͖Δ Operator͕Withholdͨ͠Β3೔଴ͬͯ OperatorΛަ୅ͯ͠ઌ୺(tip)ϒϩοΫΛrollback͢Δ (ޙड़͢ΔunwindingϝΧχζϜ)
23. DepositͱExitͷ՝୊ͱ؇࿨ ͳΜ͔͋ΔΒ͍͚͠ͲΑ͘Θ͔ͬͯͳ͍ͷͰඈ͹͢
24. Data Availabilityͷ՝୊ͱ؇࿨ Ϣʔβʔ(Light client)͕
 ୭΋࠷৽ϒϩοΫͷ৘ใΛ஌Βͳ͍ͱ͖
 ୭΋WitnessΛ࡞Εͳ͍͠୭΋TxΛ࡞Εͳ͍ (Data Unavailableͳঢ়گ) UnwindingϝΧχζϜ͕͜ΕΛ؇࿨͢Δ
25. UnwindingͷIncentivising ࣍ͷOperatorʹ͸୭Ͱ΋ͳΕΔ ͦͷίετΛ෷͏ରՁ͕ඞཁ Ͱ΋PlasmaࢠνΣʔϯҡ࣋ͷͨΊʹϚγϯͱgas͕͍Δ josojoͷվగ൛ఏҊʹ ʮ1st operatorʹcollateral(୲อۚ)Λ༻ҙͤ͞Ε͹2ndҎ߱ ͦΕΛ΋Β͑Δʯͱ͍͏ఏҊ͕͕͋ͬͨ ͦΕ͸ރׇ͢ΔͱSg͸ࢥ͏ ख਺ྉΛͱΔPlasmaͳΒख਺ྉͷߦ͖ઌ΋ߋ৽Մඞਢ
26. SNARK Proofੜ੒ͷίετ ී௨ͷϚγϯͰ5~10͔͔࣌ؒΔͱ͔ͳΜͱ͔ νϡʔχϯά͢Ε͹਺෼ʹͰ͖Δͱ͔ͳΜͱ͔ FPGAϨϕϧ͔Βࢉज़ճ࿏ʹಛԽͨ͠ϚγϯͳΒͲ͏͔ PlasmaͳΒOperator༻ͷ1ϊʔυ͚ͩͳͷͰ͍͚ͦ͏
27. 1st/2nd layer cryptoeconomics 1st layerͰzk࢖͓͏ͱࢥ͏ͱ18000ϊʔυͰ ಉ͡ܭࢉ͠ͳ͍ͱ ʹʼ 500tps tx onchainͷ൘ͰVitalik͕ specialized class of mining for zk ͷ࿩Λ͍ͯͨ͠ ʢ99% fault tolerance࢖ͬͯASICແޮʹ͢Δͱ΋ʣ
28. 1st/2nd layer cryptoeconomics 2nd layerͷcryptoeconomics͸ʮϝΧχζϜσβΠ ϯͰಈ͘Α͏ʹͯ͠΋͍͍͚Ͳɺ਌νΣʔϯͷηΩϡ ϦςΟΛᆝଛ͢ΔͳΑʯͱ͍͏΋ͷʹͳ͍ͬͯΔɻ unwindingϝΧχζϜͱ͔·ͩΠϯηϯςΟϒͱ͠ ͯ͠ΐ΅ͯ͘ɺͦۚ͜Ͱ߈ܸ͞ΕͨΒEthereumϝΠ ϯνΣʔϯͷηΩϡϦςΟΛआΓΕͯΔͱ͸ݴ͑ͳ͍
29. ͓ΘΓͰ͢