top | item 15369666

(no title)

ewillbefull | 8 years ago

Zcash's zk-SNARKs are totally private even if that ceremony failed and even if the cryptographic assumptions underlying zk-SNARKs fall apart.

I find the comparison with Bitcoin perfect. The same people trusting PoW cartels to keep their system operational are complaining that zk-SNARKs require a parameter setup for proof soundness? That doesn't really make sense to me.

discuss

order

SomeStupidPoint|8 years ago

> zk-SNARKs are totally private even if ... the cryptographic assumptions underlying zk-SNARKs fall apart

On the face of it, that sounds very wrong. Could you elaborate on what you were saying?

ewillbefull|8 years ago

Zero-knowledge proofs for a given statement, by definition, reveal nothing about its witness. zk-SNARKs (used by Zcash) are statistically zero-knowledge; there are no cryptographic assumptions involved.