<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:base="https://nickler.ninja/">
  <title>Category: zero-knowledge | nickler&#39;s</title>
  <link href="https://nickler.ninja/categories/zero-knowledge/atom.xml" rel="self"/>
  <link href="https://nickler.ninja/"/>
  <updated>2023-07-31T15:17:00+00:00</updated>
  <id>https://jonasnick.github.io/</id>
  <author>
    <name>Jonas Nick</name>
  </author>
  <generator uri="https://www.getzola.org/">Zola</generator>
  <entry>
    <title type="html">Intuition for Zero-Knowledge Proofs</title>
    <link href="https://nickler.ninja/blog/2023/07/31/intuition-for-zero-knowledge-proofs/"/>
    <updated>2023-07-31T15:17:00+00:00</updated>
    <id>https://jonasnick.github.io/blog/2023/07/31/intuition-for-zero-knowledge-proofs</id>
    <content type="html">&lt;p&gt;While working on &lt;a rel=&quot;external&quot; href=&quot;https://eprint.iacr.org/2022/510.pdf&quot;&gt;Bulletproofs++&lt;/a&gt; I realized there were gaps in my understanding of zero-knowledge proofs.
I did a quick search through the literature to find proofs for zero-knowledge that can help my understanding.
I found that either the protocols were too different to Bulletproofs(++) or the proofs seemed incomplete.&lt;/p&gt;
&lt;p&gt;For example, in Bulletproofs, removing blinding values from the protocol does not affect the proof.
This would make it seem like the changed protocol is ZK, but upon closer inspection, it isn’t.&lt;/p&gt;
&lt;p&gt;To help developing an intuition for ZK, I created a little demo proof for a toy ZK protocol.
You can find at at&lt;/p&gt;
&lt;p&gt;&lt;a rel=&quot;external&quot; href=&quot;https://github.com/jonasnick/little-crypto-notebook&quot;&gt;https://github.com/jonasnick/little-crypto-notebook&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;The toy protocol is a heavily simplified variant of Bulletproofs range proofs.
In short, it proves that a committed value is the product of two other committed values.&lt;/p&gt;
&lt;p&gt;I hope you find the demo useful too.
My goal is to continue expanding the little crypto notebook if time permits.&lt;/p&gt;
</content>
  </entry>
</feed>
