ElGamal encryption
tl;dr: ElGamal public key encrypting $\approx$ Using an ephemeral Diffie-Hellman exchanged key as a one-time pad.
Univariate sumcheck
tl;dr: Who said you can only sumcheck your multivariate polynomials? $\sum_{i\in[n]} a(\omega^i)b(\omega^i)$ can be proved with two size-$n$ multiexps and 6 FFTs! And verified with a size-4 multipairing (and a bit more?).
How to easily make Aptos post-quantum secure
tl;dr: “All is well. All is well.” – Ranchoddas Shamaldas Chanchad
Deploying zero-knowledge proofs with training wheels
tl;dr:
ZK relations are hard to implement.
Implement them twice: once in a ZK DSL and once in a sane language.
Enshrine a mandatory prover service that checks the sane implementation before creating a ZKP.
This way, bugs in the ZK DSL implementation cannot be exploited as long as the prover service is honest.
64 post articles, 8 pages.