microsoft / Nova

Nova: High-speed recursive arguments from folding schemes
MIT License
700 stars 183 forks source link

Zero-knowledge implementation gap #174

Open huitseeker opened 1 year ago

huitseeker commented 1 year ago

As outlined in the Lurk audit report, the variants of the IPA and Spartan in the repository do not provide zero-knowledge (unlike the sum-check in the original Spartan repository).

In particular, the IPA needs to be updated to use blinding commitments and the sum-check inside Spartan needs to be made hiding.

At a more abstract level, Hyrax offers a blueprint on how to make the sum-check zero-knowledge.

huitseeker commented 1 year ago

https://github.com/microsoft/Spartan2/pull/1 Looks super nice! (edit: nothing to see in this particular instance)

ekrembal commented 11 months ago

Hello,

I'm wondering about the current status of this issue. Has there been any progress on this issue, and is there a timeline for addressing it?

Thank you for the update.

srinathsetty commented 3 months ago

A cleaner solution to this problem is in the HyperNova paper, specifically in Appendix D.4