zkSummit6: Decentralized privacy layer is coming - Wanseob Lim - Zkopru maintainer
15 Dec 2020 · 9:19
Wanseob Lim, maintainer of the Ethereum zk-rollup project Zkopru, speaks at zkSummit6 in November 2020 on why a decentralized privacy layer is coming to the network. He lays out the case for privacy-preserving rollups built on zero-knowledge proofs, describing the technical path toward a privacy layer that does not rely on a trusted operator.
Speakers
Topics
Transcript
[Music] hello everyone i'm manza the maintainer of zico pro project zico pro is a layered scaling solution for private transactions we released our first test numbers in july and now preparing our personal mainnet version today i'm going to introduce briefly about sql pro network before our upcoming inner launching in short zico pre implements the private transactions using zika snark and achieves the highest scale liability using its optimistic rollout so we call this zko optimus roll up at sql pro the first cool thing of zika pro is that
you will have one integrate an animated pole for it ears training and nft altogether if we divided the pole we could easily design and implement a cheaper particle but we thought that large anomaly is more important than how cheap it is so you can transfer thai eid cryptokitties in one another many poll in singapore the next cool thing is that zuko pro supports instant retail feature because we are using the optimal scroller we should wait some finalization but we solve this problem with pay in advance system let's take a look at it in more detail first user can request an
installment or to a proxy player then the proxy player pays in advance for the given withdrawal note and takes the ownership of the note once the restoratory is finalized then the proxy player can withdraw the note and realize the feed profits so practically it provides almost same user experience as it has an instant violated the next cool step is the subtree instruction using subtraction sql pro reduce the mercury tree challenge cost about 20 times this is how look how the subtree insert is look like we are using a
fixed size substrate subtree and because using this fixed size subtree we can skip a lot of past calculations so finally the mercury challenge gets a lot cheaper consequently we could make a single transaction challenge system this is really important because the single transaction challenge system enhances the censorship resistance if you can prove any fraud using only one transaction it is almost impossible to tag the network by censoring challenge transactions to accomplish this mission we split average challenge cases so for example if a mass migration is
carrying invalid amount of it to the other network we can submit a challenge transaction for that specific reason the next cool thing is that sql pro support private atomic swap private atomic swap is really awesome because it mixes average types of tokens in one another set in because it also supports swap between nft and s20 we can use this feature for a kind of crypto merchandising system so for for example you can make some nfc and that is for tickets and i can buy those tickets using some ears 20 tokens the next feature is mass migration
instead of transfer or restore users can migrate to the other compatible network using migration transactions the accumulated migration output becomes a mess deposit for its destination network so users can easily migrate to the upgrade sql pro network without just withdraw and deposit again also sql pro has a compliance compatible system just like cks honestly we inspired a lot of things from zcash and so we implement the viewing key and spending key systems just like separate particle to span any utxo a transaction should have a signature using the spending key
and but and anyone who has the viewing key can decrypt the memo field of the transaction and because we are using ultimate scroll up it is very important to reduce the call data size therefore zico plus memo field includes only the minimum information and the recipient tries to decrypt the memo field using some inference the next price is decentralization the reason why decentralization is important in zikr is that there exists an attack factor to hack the privacy for example a centralized holder creates a dummy volume to delude others then a knife user puts a transaction
because it looked pretty they looked having traded enough and then limited set then the centralized coordinator can easily follow the transaction graph to prevent this kind of attack scenario we definitely need decentralized coordinator system so we we use brand auction to allow anyone can be the coordinator so for example if alice can insert x amount of nuts into the anonymity set then alice can secure at least x amount of anonymity against others so decentralized conditioner can secure more on animated southport each other and some of you are curious about why we are using zika optimistic
scroll up instead of zkzk robot let me quickly share the reasons we have two options for the scaling solution the first one is zika rollup that has instant finally but it requires a high performance machine to generate blocks and is difficult to implement complex protocol logics like adamix wall otherwise we can run the coordinator using a common laptop if we use optimistic roll-up furthermore it is very easy to implement complex particle and very cheap as ckc hero the one disadvantage might be that users should rate the finalization but as i mentioned zico pro has instant finality feature so users will not have an inconvenience
so as a result we could make a 657 tps network that supports private transaction one integrated an automatic pool for 8 years training and nft instant withdrawal mass migration private dynamic swap single transaction challenge system and compliance computer protocol thank you so much for paying attention in my talk i hope that we can ship our main person to you in the near future thank you all right we're live ah hello hey hey great actually something interesting so actually the tps is maximum tps is
111 at the 657 yeah cool all right so as a follow-up question for you when will this be ready yeah uh actually we are preparing our trusty setup and i will audit so our audi will be in january next year and maybe we'll be ready in a few months from the audit so i wish i i some irish people can use zika pro uh in the early of next year cool and yeah you told me just before z co prove zika proof yeah i said it wrong i'm so sorry about that um so you said you're going to be doing
a setup are you going to be doing like the phase 2 setup based on the perpetual power towel you're going to just do the you're preparing the front end to set up the phase 2 using the phase one from the purpose surprise um is there anything would you say that there's anything comparable to the cuckoo sure and surely there are a lot of some private transaction protocol using layer 2 or on the layer one the first one is tornado cache and maybe uh zero pull by igor is also the other comparable project and yeah they are all cool and actually yeah we are just offering
some ultimately roll-up-based um integrated ether and years training and nfp pool and some more cool features and i i hope people can enjoy that very nice well thank you so much for coming and staying up i know it's a rough time zone for you to do this made it cool yeah