Open woshidama323 opened 2 years ago
https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/
This means that for numbers of the same size, solving elliptic curve discrete logarithms is significantly harder than factoring
相同size的大数,解决ECC 离散对数问题,要比解决 分解素数的难度要大很多。
这也就是为什么ECC 要比 RSA更为安全的原因
By this measure, breaking a 228-bit RSA key requires less energy to than it takes to boil a teaspoon of water. Comparatively, breaking a 228-bit elliptic curve key requires enough energy to boil all the water on earth. For this level of security with RSA, you'd need a key with 2,380-bits.
意思就是说 ecc更为强大
## v 神关于pairing 的一些理解
https://medium.com/@VitalikButerin/exploring-elliptic-curve-pairings-c73c1864e627
## 中文 ecc的一些公式
https://zhuanlan.zhihu.com/p/42629724
## 其他
https://eprint.iacr.org/2004/064
https://nemocas.github.io/AbstractAlgebra.jl/dev/index.html
zcash的bellman 修改而来,
实现groth16 协议
https://crypto.stackexchange.com/questions/67857/what-is-a-rank-1-constraint-system 矩阵中的秩
https://crypto.stackexchange.com/questions/43462/what-is-a-witness-in-zero-knowledge-proof
Commitment schemes are one of the most important primitives in cryptography
Vector Commitments(VC) is a new primitive in cryptography
相关论文 Tight Proofs of Space and Replication[2] 论文作者 (Ben Fisch)
1. 主要贡献: 提出两种方法Stacked DRGs 和 ZigZag Expander DRGs
前者 抽取数据效率低了些,后者 兼顾前者的优势的情况下,抽取数据也高效
相关论文 Proofs of Replication[3]
1. 主要贡献
This paper establishes a foundation for PoReps, exploring
both their capabilities and their limitations
A bipartite graph G with regular left degree d. Each vertex in A has exactly d neighbors in B (here d = 2).
##note
Basic PoRep from Sequential Encodings
### 基本的思想是
The first basic PoRep we describe applies a slow encoding to a file F to transform it into a
format F˜, which can be quickly decoded back to F.
一般的方法是:
Verifiable Delay Encodings The primitive we use to implement slow encodings in our most basic PoRep is called a verifiable delay encoding (VDE).
### 特点是:
1. this is an encoding that is slow to compute
yet fast to decode
### Basic-VDE-PoRep
###
论文来源[Depth-Robust Graphs and Their Cumulative Memory Complexity]
Thus, in some sense we cheated, as the Basic-PoRep achieves arbitrarily small -rational security for a fixed replication time
## 这个是怎么得到的?
a degree d = 8 expander graph
= 1%
then we can safely set L = 10
## 关键笔记
there is an “even” and “odd” mode of selecting the expander edges.
![image](https://user-images.githubusercontent.com/11014169/159437632-29c4deb0-831b-447a-a1e4-76cfb53c9cf6.png)
零知识证明数学理解
starks-vs-snarks
从零开始学习 zk-SNARK
ZKS当前的进展 zkevm
密码学最新研究论文网站
https://eprint.iacr.org/