liveBook · Manning

Proof-system setup

As explained in Real-World Cryptography

The parameter-generation process that establishes the common values required by a cryptographic proof system.

A proof system needs a setup phase to agree on shared parameters and common values, called a common reference string (CRS). The choice matters because some setups leave behind secrets that can forge proofs. section 15.3

Classify setups by how parameters are created and reused:

  • Trusted setups give the creator secret “toxic waste” that could forge proofs. Multiparty computation (MPC) reduces the risk if at least one participant is honest and deletes their secret. section 15.3
  • Universal trusted setups support any circuit up to a defined size; circuit-specific setups support only one circuit. section 15.3
  • Transparent setups require no trusted third party and are universal by design. section 15.3

How Real-World Cryptography covers it

How deep it goes
Distinguishes trusted, universal, and transparent setups, including toxic waste and MPC, without detailing parameter-generation algorithms.
Examples
Uses MPC ceremonies and secret deletion as safeguards against toxic waste remaining after trusted setup.
What you can do after
Evaluate setup choices by their trust requirements, circuit scope, proof-forging risk, and use of multiparty safeguards.
How it connects
Connects zero-knowledge proofs with common reference strings, trusted setups, universal setups, transparent setups, and multiparty computation.
Cover of Real-World Cryptography
liveBookmanning.com
Read Real-World Cryptography on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.