aleohq / aleo-setup Goto Github PK

View Code? Open in Web Editor NEW

This project forked from celo-org/snark-setup

59.0 12.0 82.0 10.41 MB

A Setup Ceremony for Universal SNARKs

Rust 99.23% Shell 0.72% Dockerfile 0.05%

aleo setup zksnarks ceremony

aleo-setup's Introduction

Aleo Setup I

Overview

Pairing based SNARKs require the generation of certain parameters in order to achieve high efficiency (small proof sizes, fast proving and verifying time). These parameters are generated by another set of parameters which MUST remain secret. We call these secret parameters the "toxic waste". If a prover knows these secrets, then they can generate valid proofs for invalid statements, breaking soundness. This is undesired!

In order to guarantee that no prover will ever know these secrets, we can generate them in a distributed manner. Each participant in this so-called "ceremony" will contribute to the generation of the parameters with their own secret. If at least 1 participant is honest and destroys their secret, then there should be no way for a malicious prover to create fake proofs.

This repository contains implementations for the BGM17 multi party computation. The ceremony is split in two phases, one which generates the Powers of Tau, and one which "specializes" them to the provided arithmetic circuit for the Groth16 SNARK.

Note that the generated Powers of Tau can be re-used for any other Phase 2 setup, or for instantiating other mechanisms, such as the KZG10 polynomial commitment scheme.

For instructions on how to ensure that the ceremony is executed properly, refer to RECOMMENDATIONS.md

Setup I

Phase 1 (Powers of Tau)

A coordinator generates an accumulator
Participant downloads the latest accumulator
Participant contributes their randomness to the accumulator (randomness is permantently deleted after this step)
Participant uploads the accumulator back to the coordinator
Coordinator verifies the accumulator was transformed correctly and produces a new challenge

The notable part about this procedure, is that it _never_has to end. This is what allows SNARKs utilizing KZG10 to have a "continuous" setup. If a participant does not trust the setup, they themselves can contribute to the Powers of Tau, and instantiate KZG10 with the new parameters.

Setup II

Phase 2 (Parameterization to Groth16)

Coordinator "prepares" the parameters from Phase 1 and converts them to Lagrange Coefficients
Participant downloads the latest state of the parameters
Participant contributes their randomness to the parameters (randomness is permantently deleted after this step)
Participant uploads the parameters back to the coordinator
Coordinator verifies the accumulator was transformed correctly
Loop from 2 for all participants

This produces parameters which can then be used for constructing Groth16 SNARKs for that circuit. The setup is sound so long as 1 party was honest and destroyed their "toxic waste" in step 3.

Build Guide

Build with cargo build (--release). You will receive a phase1 and prepare_phase2 binary in the target/ directory.

Test with cargo test --all.

Benchmark with cargo bench --all (uses criterion)

If contributing, do not forget to run cargo fmt and cargo clippy --all-targets --all-features -- -D warnings

All crates require Rust 2018 edition and are tested on the following channels:

1.39.0
stable

If you do not have Rust installed, run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

Directory Structure

This repository contains several Rust crates that implement the different building blocks of the MPC. The high-level structure of the repository is as follows:

phase1: Rust crate that provides an accumulator for Powers of Tau. It runs multithreaded and works in "batches", allowing large powers to be calculated in resource constrained environments
phase2: Rust crate that provides a wrapper over Groth16's parameters which also contains a verifiable transcript of the so-far contributions to the specialization phase
setup1-contributor: Rust crate for the Aleo Setup I contributor
setup1-verifier: Rust crate for the Aleo Setup I verifier
setup2: Rust crate for running Aleo Setup II
setup-utils: Utility functions shared across crates, involving i/o, mathematical operations and errors.

License

This library is a collection of repositories licensed under different standard licenses. Please refer to each individual repository for its respective license.

aleo-setup's People

Contributors

Stargazers

Watchers

Forkers

ssdbkey kellpossible apruden2008 niklaslong dieface anoma gnosed valyriaeth geniusxprime ikaika1 kriptodehasii capknsedat 76valeriy iamalwaysuncomfortable safcda romanwlnov carmelinaspox deliciamis kayeujate scotendat calanitra gellandrea eulaitb kamipink twanaenders vernettalac earlievanti quirinagriim pafranksvoau adarutp alfl0m glennismma goddardebre sheplteaff teresiamxp mickieyodt busterbejd isidoradenti nadiaaocephas adolpjg fridawipu gerdavon alainazlbahner demsk1y cobyvitnu flngmarvin arifansari30 bnwerzraibia11 arsad48821 ernestinaopum missqqloftis leylasoaug frgv0wyandt abbiemeanortxt jonathanuuz stevekadmx shehelzer ashelyscobyx benjubeh svserden 0xlogan-x kriptodahscgo annahink web3pancake mistmorn0 cynthiacurtis jerrypatterson89 nicolestewart78 vigenterzian antonmatveychuk penumbra-zone touba73 ebrakbr vadlar223 caenviletcajenn sskav7 hanooch74 stvolodya hyangray chorongchorong-home sweetvicta sujoypal12112008

aleo-setup's Issues

Dependabot can't resolve your Rust dependency files

Dependabot can't resolve your Rust dependency files.

As a result, Dependabot couldn't update your dependencies.

The error Dependabot encountered was:

Updating crates.io index
error: failed to select a version for `rand`.
    ... required by package `setup-utils v0.3.0 (/home/dependabot/dependabot-updater/dependabot_tmp_dir/setup-utils)`
    ... which is depended on by `phase1 v0.3.0 (/home/dependabot/dependabot-updater/dependabot_tmp_dir/phase1)`
    ... which is depended on by `phase1-cli v0.3.0 (/home/dependabot/dependabot-updater/dependabot_tmp_dir/phase1-cli)`
versions that meet the requirements `=0.8.2` are: 0.8.2

the package `setup-utils` depends on `rand`, with features: `wasm-bindgen` but `rand` does not have these features.


failed to select a version for `rand` which could resolve this conflict

If you think the above is an error on Dependabot's side please don't hesitate to get in touch - we'll do whatever we can to fix it.