A Gentle Introduction to the MPC-in-the-Head Transformation - ZKSecurity
In this post, we will examine one of the most interesting ways to construct zero-knowledge proofs: the MPC-in-the-Head transformation. This was first introduced in the 2007 paper Zero-knowledge from secure multiparty computation, and it is often referred to as the IKOS transformation, from the initials of the authors of the paper. The transformation allows us to construct a zero-knowledge proof system from any MPC protocol, which is treated as a black-box. We will explore the intuition behind MPC protocols and the original transformation technique, and discuss how this construction can be applied to develop post-quantum signature schemes. Secure Multi-Party computation (MPC) is a cryptographic technique that allows multiple parties to securely compute a function collectively. Each party holds its own private input, and the goal is to compute a designated function over all the private inputs. At the end of the protocol, each party should learn only the output of the function and nothing
In this post, we will examine one of the most interesting ways to construct zero-knowledge proofs: the MPC-in-the-Head transformation. This was first introduced in the 2007 paper Zero-knowledge from secure multiparty computation , and it is often referred to as the IKOS transformation, from the initials of the authors of the paper. The transformation allows us to construct a zero-knowledge proof system from any MPC protocol, which is treated as a black-box. We will explore the intuition behind MPC protocols and the original transformation technique, and discuss how this construction can be app
Explore this link on the map →saved by
related reading
- ProofsArgsAndZK.pdfpeople.cs.georgetown.edu
- Putting the zk in zkVM: Jolt now supports zero knowledge - a16z cryptoa16zcrypto.com
- The Spartan zkSNARK framework - Alin Tomescualinush.github.io
- Explaining Halo 2 - Electric Coin Companyelectriccoin.co
- Zero Knowledge Proofs: An illustrated primer – A Few Thoughts on Cryptographic Engineeringblog.cryptographyengineering.com
- Secure multi-party computation - Wikipediaen.wikipedia.org
- Lecture 14: Zero knowledge proofsboazbarak.org
- Zero-knowledge proof - Wikipediaen.wikipedia.org
- Zero-Knowledge Proofs | MIT CSAIL Theory of Computationtoc.csail.mit.edu
- Hardware Acceleration for Zero Knowledge Proofs - Paradigmparadigm.xyz
- ZK-Friendly Hash Functions | Zellic — Researchzellic.io
- Zero Knowledge Canon, part 1 & 2 - a16z cryptoa16zcrypto.com