EthSnarks

Zero-Knowledge proofs are coming to Ethereum and Dapps in 2018/2019!

EthSnarks is a collection of zkSNARK circuits and supporting libraries to use them with Ethereum smart contracts, it aims to help solve one of the biggest problems facing zkSNARKS on Ethereum - cross-platform on desktop, mobile and in-browser, cheap enough to run on-chain, and with algorithms that significantly reduces the time it takes to run the prover.

The notable advantages of using EthSnarks are:

• Reduced cost, 500k gas with 1 input, using Groth16.
• Prove zkSNARKs in-browser, with WebAssembly and Emscripten
• Linux, Mac and (soon) Windows builds
• Solidity, Python and C++ support in one place
• A growing library of gadgets and algorithms

EthSnarks is participating in the Ethereum Foundation's grants program Wave 4, over the next 6-8 months development will continue full-time, and we will be working with companies and developers to help overcome the common challenges and hurdles that we all face. Get in-touch for more information.

WARNING: EthSnarks is alpha quality software, improvements and fixes are made frequently, and documentation doesn't yet exist

Examples

• Miximus - a self-service coin mixer and anonymous transfer method for Ethereum

Building

Type make - the first time you run it will retrieve submodules, setup cmake and build everything, for more information about the build process see the Travis-CI build logs.

Before building, you may need to retrieve the source code for the dependencies:

git submodule update --init --recursive

The following dependencies (for Linux) are needed:

• cmake
• g++ or clang++
• gmp
• libcrypto
• boost
• npm / nvm

WebAssembly and JavaScript builds are supported via ethsnarks-emscripten

Requests and Contributions

This project aims to help create an ecosystem where a small number of well tested but simple zkSNARK circuits can be easily integrated into your project without having to do all of the work up-front.

If you have any ideas for new components, please Open an issue, or submit a pull request.

Gadgets

We are surely increasing the range of gadgets, supporting libraries, available documentation and examples; at the moment the best way to find out how to use something is to dig into the code or ask questions via a new issue

The following gadgets are available

• 1-of-N
• 2-bit lookup table
• 3-bit lookup table
• MiMC hash and cipher
• Miyaguchi-Preneel one-way function
• Merkle tree
• SHA256 (Ethereum compatible, full round)
• Shamir's Secret Sharing Scheme
• 'Baby JubJub' twisted Edwards curve
  • EdDSA
  • Pedersen hash

Maintainers

@HarryR