Weikeng Chen
Weikeng Chen
Not really an issue, but likely a direction. The offline-online model allows us to reduce online latency, but it also means that the servers must store the offline preprocessed result...
It seems that the implementation does not check the MAC of the outputs (even with ``__debug`` turned on). I feel that it is okay for benchmark purposes since the overhead...
This issue is just to leave a note. It is mainly an engineering addition. Currently, we generate the offline materials in big batches of N. This is because efficient LPN...
This issue serves as a note on EMP-ZK for a prime field that is not of a Mersenne prime, but with a high two-arity (aka, p - 1 has a...
## Feature I propose to add three software syscalls (i.e., https://github.com/risc0/risc0/blob/main/risc0/zkvm/src/host/server/exec/syscall.rs#L107) that are useful for modular operations and do not require any change in the circuit. - SysUntrustedModInv: obtain an...
This is a note that the current PCD uses the `constraints` branch of Marlin, which uses a hardcoded Poseidon parameters, regardless of the curves and fields of the proof systems....
The recent upgrade, which switches the core protocols to xJsnark's, has suggested considerations on a separate metric: density. Basically, xJsnark's techniques have been developed sophisticatedly toward reducing the number of...
One thing special in Libra/Virgo is that it supports many customized gates, particularly: 1. a gate that sums 2^L values together. 2. an expsum gate that computes the bit composition...
I have a minor question from the talk related to the hiding encoding of a point. 1. PURB uses Kyber v2, which samples the public key in the prime-order group...
The current implementation in `ecfactory` to search BN curves did not evaluate the subgroup security, as discussed in https://eprint.iacr.org/2015/247.pdf. Mainly, pairing might be subject to subgroup attacks. To prevent such...