pull down to refresh

Sources - idk I work in IT/mathematics and have spend a lot of time with zk-proofs such as signatures and hash preimages (their derivatives specifically). I do think they look cryptographically sound for now - but the spirit of Bitcoin has been betting on standard and well established cryptography for a long time. Modern zk-proofs do not have this long history of being unbroken yet
STARK proofs rely on crypto assumptions that are even older than the crypto assumptions bitcoin already relies on (collision-resistant hash vs elliptic curve DLP; see here)
Regarding implementations, there are validity proof implementations that are about the same age as the Schnorr implementation that is used in bitcoin.
reply