Generating a Proof for a Private Network

[zd819]

Hey All. Hope you are doing well.

Running the default settings for the ezkl compiler work fine(public network, private input).
However, I am unsure about generating proofs for private networks, that is : proving for a private network that the public inputs into the network produce a specific output.
According to the documentation I believe this is possible: "I ran my private neural network on some public data and it produced this output", and would appreciate any help in doing this.

Thanks

[alexander-camuto]

Hey @zd819 :) by default the parameters of the network are private, the inputs to the network are private and the outputs of the network are publically known.

You can play around with these settings with the following flags

# sets the networks parameters to be public or private 
--public-params=true/false
# sets the network inputs to be public or private 
--public-inputs=true/false
# sets the network output to be public or private 
--public-outputs=true/false

Example usage for public inputs to the network produce a specific public output, whilst keeping weights private

ezkl --public-inputs=true --public-params=false --public-outputs=true  prove ...

Hope that helps :)

[alexander-camuto]

Yeah -- you can also verify any proofs locally (without deploying the contract) using the evm verifier as well.

There are detailed instructions on how to do so in the readme. Let me know if anything is unclear there.

[zd819]

Thanks for the replies and comments everyone. It makes sense now why the model is required for current verification, and also the evm verifier is very useful too.
How far is the progress in allowing the compiler to verify without model access, and what are the main bottlenecks with getting it to work with the Halo2 APIs?
This use case especially is something I am very interested in and would look into it or help if possible.
Thanks again

[alexander-camuto]

We're getting closer every day aha. A big step towards this was in #208 . Basically recent updates to Halo2 have allowed more things to be saved / serialized between runs. So hopefully we can get a verifier that doesn't require access to a model. If you are in need of this feature we can hop on a call to discuss it / open an issue to track it :)

[alexander-camuto]

Hey @zd819 I've implemented it here #216 . Hope that helps

[zd819]

Hey @alexander-camuto thanks for the replies and the recent push.
I would love to hop on a call if you have time to discuss the implementation as I have a couple of questions still.
Whichever platform you prefer and whatever time you prefer I'll be available, just let me know.
Thanks

[alexander-camuto]

FInd my twitter and DM me (should be in my github bio) :)

[zd819]

Just followed, I think your DMs are turned off as I am unable to DM right now. My tag is @BlasianHokage