From b6596ffcf67fc7c435d33abc9451757523a8e4ca Mon Sep 17 00:00:00 2001 From: ertosns Date: Sat, 14 Oct 2023 16:55:11 +0300 Subject: [PATCH] [research/bulletproof-mpc] conclude dark-renegade --- script/research/bulletproof-mpc/README.md | 23 +++++++++++++++++++---- 1 file changed, 19 insertions(+), 4 deletions(-) diff --git a/script/research/bulletproof-mpc/README.md b/script/research/bulletproof-mpc/README.md index 3078410fc..0ad861d64 100644 --- a/script/research/bulletproof-mpc/README.md +++ b/script/research/bulletproof-mpc/README.md @@ -6,23 +6,38 @@ - from on-chain published VALID-COMMITMENT counterparties validate it's valid, and start matching process. - reconstruct commitment over MPC through secret shares [o], [b], [f], [r], first construct match tuple $M=(\tilde{m_1}, \tilde{m_2}, \tilde{v_1}, \tilde{v_2}, d, f_1, f_2)$ validate exchange coins match, $v_1==v_2$, directions, and that fee covers relay fee. reconstruct commitments shares $H_{o_1}$, $H_{b_1}$, $H_{f_1}$, $H_{o_2}$, $H_{b_2}$, $H_{f_2}$, open shares through third party, then exchange notes. +## renegade performance +- both bulletproof over mpc, and collaborative zksnark over mpc are 2 times proving, and verifying of single prover proof [^10],[^11] + ## dark renegade - internal, and external wallet update state $T_I$, $T_E$ are replaced by drk money transfer contract. -- TODO eliminate third-party for opening shares. +- eliminate third-party for opening shares using witness encryption. # framework -- mpc-stark[^2] is spdz mpc built over stark-curve (curve can change) -- mpc-bulletproof[^3] mpc r1cs with mpc inner product proof built over mpc-stark +- mpc-stark[^2] is spdz mpc built over stark-curve (curve can change), we have sage implementation [^12] +- mpc-bulletproof[^3] mpc r1cs with mpc inner product proof built over mpc-stark, we have sage implementation of the ipp [^13] - plug darkfi-p2p network into mpc-bulletproof - fork renegade[^4] - if the aim is to use halo2 proof zk-proofs, fork mpc-stark, and replace stark-curve with pallas-curve. - rewrite renegade zk-snark proofs with darkfi compiler - replace wallet update with money transfer contracts - - TODO eliminate third-party for opening shares. + +## open fairness + - opening shares between two strategic players in p2p network without a third-party is impossible [^5]. + - one turn around is witness encrypting (WE) [^6],[^9],[^8] the match shares for which the other party encrypt with witness (the other share), and the opposite for the peer [^7] [^1]: https://renegade.fi/whitepaper.pdf [^2]: https://github.com/renegade-fi/mpc-stark [^3]: https://github.com/renegade-fi/mpc-bulletproof [^4]: https://github.com/renegade-fi/renegade +[^5]: https://kodu.ut.ee/~swen/courses/crypto-ii/2008/cleve1986.pdf +[^6]: https://eprint.iacr.org/2013/258.pdf +[^7]: https://eprint.iacr.org/2017/1091.pdf +[^8]: https://github.com/guberti/witness-encryption-demos +[^9]: https://arxiv.org/pdf/2112.04581.pdf +[^10]: https://eprint.iacr.org/2021/1530 +[^11]: https://github.com/renegade-fi/mpc-bulletproof/pull/14 +[^12]: https://github.com/darkrenaissance/darkfi/tree/master/script/research/mpc +[^13]: https://github.com/darkrenaissance/darkfi/tree/master/script/research/bulletproof-mpc