Re: [zapps-wg] Zkproofs.org standards workshop

2018-04-25 Thread Cody Burns via zapps-wg
Hello everyone, I'm currently working on a software entitlement project based around the zsl implementation in quorum. A zsl token based software license for product management. I'll share more when possible, but currently it has a tight nda. But you can add it to the use case list at least. Co

Re: [zapps-wg] Zkproofs.org standards workshop

2018-04-22 Thread Andrew Miller via zapps-wg
Hey Lucas, thanks for pointing this out, I've also found this to be a missing part of C-S notation. Here's one more subtle reason to be explicit about what are the public inputs. When you generate public parameters for a snark scheme, some public values may be hardcoded in the circuit, while others

Re: [zapps-wg] Zkproofs.org standards workshop

2018-04-22 Thread Lucas Vogelsang via zapps-wg
Andrew, I wanted to follow up on your proposal of formulating ZkPoKs. One thing that was a bit counter intuitive to your notation is the fact that while it's very clear what private inputs a snark has, the public inputs are not clearly designated. E.g.: ZkPoK{ (R1, R2): H1 = sha256(R1) and H2 = sh

Re: [zapps-wg] Zkproofs.org standards workshop

2018-03-26 Thread Izaak Meckler via zapps-wg
One application that I like: sending ads with a proof proving they were generated by some algorithm that is known not to have access to personal data. And I like that notation Andrew -- there is a sort of extension to it (which is basically the idea of snarky) which involves not having to declare

Re: [zapps-wg] Zkproofs.org standards workshop

2018-03-24 Thread Andrew Miller via zapps-wg
Lucas's post reminded me of something I wanted to post about: If there's one thing I'd like to take up the torch for and advocate as a standard, it's to use a conventional pseudocode for describing snark application ideas. What I have in mind is Camenisch-Stadler proof notation. It looks like this:

Re: [zapps-wg] Zkproofs.org standards workshop

2018-03-24 Thread Andrew Miller via zapps-wg
That's awesome Lucas, thanks for this input, these are pretty cool application scenarios. They're all quite relevant to a standards effort because they seem to involve interfacing between zkSNARKs and other standardized primitives (password hash functions, anonymous credentials, extensions to ZSL).

Re: [zapps-wg] Zkproofs.org standards workshop

2018-03-24 Thread Lucas Vogelsang via zapps-wg
I've put some thoughts into possible use cases, here are some that we have been thinking about in the context of decentralized business applications. Some of these concepts are things we are actually working on, others just ideas - blind auctions (including double dutch auctions) - page-rank style

[zapps-wg] Zkproofs.org standards workshop

2018-03-23 Thread Andrew Miller via zapps-wg
Dear Zapps, I just wanted to let you know that there will be a standards workshop organized by several academics / industry participants in May. https://zkproof.org I want to make sure that the workshop includes input from all the groups involved in this open source community that are developing t