What if… verifying the execution of pairings inside SNARKs can be done much faster than already known?
Andrija Novakovic and @LiamEagen have just published a paper on this!
Let’s explore this below 🧵
1/13
Curious about Zero-knowledge? 🤔
ETH Belgrade is a go-to place for gathering knowledge about this powerful technology.
Don't miss the following ZK speakers 👇
cathie.⌐◨-◨
Andrija Novakovic
Miros (lav)
Özgür Armanc Yiğit
Why do we need to construct another curve for operations on coordinates in Circom?
The last, 9th lecture of ZK course powered by Mathematical Academy in Belgrade proved to be maybe the most fruitful one this year for me 🤗
Now, to the answer from our brilliant Andrija Novakovic👇
We're excited to have weijie.eth and Andrija Novakovic on the Consesnus stage, talking about a gas-efficient ZK set membership protocol 👀
Watch along!
📺 EthereumZuri.ch
New paper out from Andrija Novakovic Geometry Research and Liam Eagen Alpen Labs with exciting results for pairing verification performance both onchain and in BitVM-like protocols 👀
eprint.iacr.org/2024/640.pdf
🥁 NEW SPEAKER ANNOUNCEMENT
More amazing speakers are coming as Andrija Novakovic from Geometry Research is joining to the ETH Belgrade lineup.
Andrija is a seasoned cryptography researcher, and you can expect him to delve deep into ZK tech in his talk.
Hi Andrija Novakovic Kobi Gurkan 🙏
I'm trying to do Algo 5 to find c (ia.cr/2024/640)
I use root of unity - FQ12([82, 0, 0, 0, 0, 0, -18, 0, 0, 0, 0, 0])
But my w (27th root) muls don't change the result at all...
For any s of {0,1,2},
(f * w^s) ^ (q**12 - 1) // 3 != 1
![Hi @AndrijaNovakov6 @kobigurk 🙏
I'm trying to do Algo 5 to find c (ia.cr/2024/640)
I use root of unity - FQ12([82, 0, 0, 0, 0, 0, -18, 0, 0, 0, 0, 0])
But my w (27th root) muls don't change the result at all...
For any s of {0,1,2},
(f * w^s) ^ (q**12 - 1) // 3 != 1](https://pbs.twimg.com/media/GNIqIHyX0AEHtsV.png "Shramee Srivastav (@shrameetweets) on Twitter photo 2024-05-09 11:56:59 Hi @AndrijaNovakov6 @kobigurk 🙏
I'm trying to do Algo 5 to find c (ia.cr/2024/640)
I use root of unity - FQ12([82, 0, 0, 0, 0, 0, -18, 0, 0, 0, 0, 0])
But my w (27th root) muls don't change the result at all...
For any s of {0,1,2},
(f * w^s) ^ (q**12 - 1) // 3 != 1")
catch up on the new result from Andrija Novakovic and Liam Eagen on how to optimize pairings in snarks and on-chain verifiers, by removing final exponentiation and more
it's applicable almost everywhere :)
reach out to Andrija Novakovic or me on how to use it in your case
Shoutout to Nico | ge⬡metry research , @andrijanovakov6 & weijie.eth 's implementation of functional commitments.
With all the excitement around GKR-based proving systems, looking forward to the next functional commitments on the block applying it there.
Pairing verification…simplified.
Wave goodbye to the final exponentiation 👋
Congrats Andrija Novakovic Liam Eagen on the new paper! eprint.iacr.org/2024/640.pdf
Very relevant to some upcoming work at Alpen Labs.
✨🇹🇷 Today, at #ZKAccelerate , Diego_Kingston participated in the panel discussion 'New Frontiers in ZK Research' alongside Mamy Ratsimbazafy 🦇🔊 - Taiko 🥁, Andrija Novakovic - Geometry and Alisa Cherniaeva - =nil; Foundation, all moderated by Lance - Giza.
👉 Watch it…
Faster verification of pairings *inside* arithmetic circuits. Andrija Novakovic is a beast
#zeroknowledge teknolojisi hakkında Türkçe bülten zkApe otuz birinci sayısı çıktı.
zkape.substack.com/p/zkape-31/
Espresso Systems HyperOracle Aleo Namada Geometry @gonucleo John Eda b62 Privacy & Scaling Explorations Errol Andrija Novakovic Dan Boneh Zee Prime Capital
Was happy to see a nice post by Andrija Novakovic and Kobi Gurkan on Groth16 Malleability, which bugged me a lot at some point.
geometry.xyz/notebook/groth…