[ianandrich]

I know this is useful for crypto, but I think think I'm actually more interested in what new modes of remote code running on untrusted platforms this enables.

[ChadNauseam]

That is exactly the reason it's useful for crypto, nodes need to verify the output of code running on other nodes without trusting them.

[Ar-Curunir]

This scheme in particular is not useful for cryptocurrencies; we already knew how to make efficient zkSNARKs with perfect zero-knowledge before this result. This paper is a beautiful work of theory.

[drhodes]

It does seem like the article touches on concerns relevant to homomorphic encryption. Maybe someone knows if there is a connection.