Zero-Knowledge proofs are coming to Ethereum and Dapps in 2018/2019!
EthSnarks is a collection of zkSNARK circuits and supporting libraries to use them with Ethereum smart contracts, it aims to help solve one of the biggest problems facing zkSNARKS on Ethereum - cross-platform on desktop, mobile and in-browser, cheap enough to run on-chain, and with algorithms that significantly reduces the time it takes to run the prover.
The notable advantages of using EthSnarks are:
- Reduced cost, 500k gas with 1 input, using Groth16.
- Prove zkSNARKs in-browser, with WebAssembly and Emscripten
- Linux, Mac and (soon) Windows builds
- Solidity, Python and C++ support in one place
- A growing library of gadgets and algorithms
EthSnarks is participating in the Ethereum Foundation's grants program Wave 4, over the next 6-8 months development will continue full-time, and we will be working with companies and developers to help overcome the common challenges and hurdles that we all face. Get in-touch for more information.
WARNING: EthSnarks is alpha quality software, improvements and fixes are made frequently, and documentation doesn't yet exist
Type make - the first time you run it will retrieve submodules, setup cmake and build everything, for more information about the build process see the Travis-CI build logs.
Before building, you may need to retrieve the source code for the dependencies:
git submodule update --init --recursive
The following dependencies (for Linux) are needed:
- cmake
- g++ or clang++
- gmp
- libcrypto
- boost
- npm / nvm
WebAssembly and JavaScript builds are supported via ethsnarks-emscripten
This project aims to help create an ecosystem where a small number of well tested but simple zkSNARK circuits can be easily integrated into your project without having to do all of the work up-front.
If you have any ideas for new components, please Open an issue, or submit a pull request.
We are surely increasing the range of gadgets, supporting libraries, available documentation and examples; at the moment the best way to find out how to use something is to dig into the code or ask questions via a new issue
The following gadgets are available
- 1-of-N
- 2-bit lookup table
- 3-bit lookup table
- MiMC hash and cipher
- Miyaguchi-Preneel one-way function
- Merkle tree
- SHA256 (Ethereum compatible, full round)
- Shamir's Secret Sharing Scheme
- 'Baby JubJub' twisted Edwards curve
- EdDSA
- Pedersen hash