Halo
TL;DR
Halo nye zero-knowledge ɖaseɖigbalɛ [proof] (ZKP) ƒe ɖoɖo si me mɔ̃ ƒe ɖoɖo xexlẽnuwo [trusted setup] mele o, eye wòte ŋu wɔ ɖaseɖigbalɛwo ƒe wo nɔewo me gbugbɔ ƒoƒo, si Sean Bowe kpɔ le Electric Coin Co. Eɖe mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe hiahiã ɖa, eye ewɔe be ɖaseɖigbalɛwo ƒe wo nɔewo me gbugbɔ ƒoƒo nanye nusi wòate ŋu wɔ, si nye Zcash ƒe nu ƒe dziyiyi [scaling] kple dedienyenye ƒe mɔɖoɖo si le fifia ƒe gɔmeɖoƒe.
- Nu si wònye: zk-SNARK ƒe ɖoɖo si me gbugbɔ ƒoƒo wɔa dɔ nyuie, eye mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe vɔsa mele o.
- Nu ka ta wòle vevie: Zcash ƒe Orchard ɣaɣla [shielded] gaƒuƒoƒo [pool], si wɔ dɔ kple NU5 le 2022 me, zãa Halo 2 — nyadzɔdzɔ me dɔwɔwɔ si wotsɔ gɔmeɖeɖe sia wɔe.
- Nɔnɔme vevi: "Toxic waste" aɖeke metsɔ tso vɔsa ƒe mɔɖoɖowɔwɔwo me o, eye ɖaseɖigbalɛwo ate ŋu aɖo ɖase kple ɖaseɖigbalɛ bubu siwo menye woƒe xexlẽme o.
- Mɔ̃ na ame be wòazã: Halo 2 nye dɔwɔnu si ƒe teƒe ŋuti nya le ame sia ame ƒe asi me le MIT kple Apache 2.0 te, eyata ame sia ame le ekosystem me ate ŋu atu ɖe edzi.
Gɔmeɖeɖe Vevi
Halo nye zero-knowledge ɖaseɖigbalɛ ƒe ɖoɖo si me mɔ̃ ƒe ɖoɖo xexlẽnuwo mele o, eye wòte ŋu wɔ wo nɔewo me gbugbɔ ƒoƒo, si Sean Bowe kpɔ le Electric Coin Co. Eɖe mɔ̃ ƒe ɖoɖo xexlẽnuwo ɖa eye ena be Zcash gaɖoɖowo ƒuƒoƒo ƒe ɖoɖonu [blockchain] ƒe nu ƒe dziyiyi nanɔ sɔ gbɔ. Halo nye zero-knowledge ɖaseɖigbalɛ ƒe ɖoɖo gbãtɔ si me dɔwɔwɔ nyuie kple wo nɔewo me gbugbɔ ƒoƒo le — ame geɖe bua be enye sayensi ƒe dɔkpɔkpɔ gã aɖe.
Akpa eveawo
- Polynomial Commitment Scheme. Ena be ame si dea adzɔgbeɖeɖe [commitment] te polynomial aɖe ate ŋu adee te kple agbalẽkpa kpuie aɖe, si ame si le kpɔɖeŋu wɔm ate ŋu azã atsɔ akpɔ polynomial si wode adzɔgbeɖeɖe te la ƒe xexlẽme siwo wogblɔe la ƒe nyateƒe.
- Polynomial Interactive Oracle Proof. Ame si le kpɔɖeŋu wɔm bia be ame si dea ɖase fia (algorithm aɖe) naʋu adzɔgbeɖeɖeawo katã le teƒe siwo wòtsɔe, kple polynomial adzɔgbeɖeɖe ƒe ɖoɖo la, eye wokpɔe be sɔsɔme le wo dome nyateƒetɔ.
Mɔ̃ ƒe ɖoɖo xexlẽnuwo mele o
zk-SNARKs doa asi ɖe reference string ƒe ɖoɖo (CRS) aɖe ŋu abe dukɔ ƒe parameter na ɖasefia kple ɖasekpɔkpɔ ene. Ele be ame si wòle mɔ̃ na la nawɔ CRS sia ɖo do ŋgɔ. Va se ɣeyiɣi kpui aɖe ko si va yi me la, secure multi-party computations (MPC) siwo le sesĩe — abe esi Aztec network kple Zcash wɔe ene — hia be woadze agbagba akpɔ afɔku si le trusted setup ceremony sia me la ɖa.
Zcash ƒe Sprout kple Sapling ɣaɣla gaƒuƒoƒowo tsã zã BCTV14 kple Groth16 zk-proving ƒe ɖoɖowo. Esiwo nye dedie hã la, woƒe seɖoƒe le: womate ŋu akpɔ nu ƒe dziyiyi o elabena wodze ɖe dɔwɔwɔ ɖeka ko ŋu, "toxic waste" (crypto ƒe nu siwo wɔ le genesis vɔsa me ƒe akpa siwo tsi) ate ŋu anɔ anyi, eye mɔ̃ ƒe akpa aɖe — togbɔ be eŋutɔe kpui — le woƒe bu be vɔsa la nyo.
Halo ɖea mɔ̃ ƒe ɖoɖo xexlẽnuwo ɖa to sesĩe nuxaxa ƒe nɔnɔme geɖe ƒoƒo ɖe ɖeka me enuenu le elliptic curves ƒe wɔwɔwo dzi, ale be xexlẽme ƒe ɖasewo ate ŋu azã wo ŋutɔ gbɔɖeɖe nyuie (nested amortization). Eƒe nu vevie aɖe nye be structured reference string la (vɔsa ƒe nusi do go) ate ŋu woatrɔe, si na dɔwɔwɔwo abe mɔ̃ŋlɔ ƒe dɔwɔwɔ [smart contract] ene.
Halo naa ame siwo zãe la ɖasekpeɖeŋu eve vevi tso zero-knowledge ɖaseɖigbalɛ ƒe ɖoɖo gã aɖe ƒe dedienyenye ŋu. Gbãtɔ, ena be woaɖo ɖase be ame aɖeke si le genesis vɔsa la me mewɔ mɔ dzeɖe eme aɖe si nye ɣaɣla be wòatsɔ awɔ gaɖoɖo siwo menyo o. Evelia, ena be woafia be ɖoɖo la nɔ dedie le ɣeyiɣi me, togbɔ be wotrɔe eye wotsɔ yeyewo kpe ɖe edzi.
Sean Bowe ƒe gɔmeɖeɖe le Dystopia Labs
Notary ƒe ɖoɖonu
Bu ɖe zk-SNARK si le mɔ̃ me abe agbalẽ si woɖe asi na ene: xexlẽdzesi ɖeka, kpekpeɖeŋu ɖeka, wowu. Fifia, bu ɖe eŋu be ele na wò be nàɖe ɖase be agbalẽ akpe wu ene nyateƒe. Ne recursion mele o la, ame si le kpekpeɖeŋu le dzrom la anɔ be yeakpɔ xexlẽdzesi ɖe sia ɖe.
Halo trɔa agbalẽ si wokpɔ ɖeŋu la ɖe dzesi aɖe dzi le agbalẽ si kplɔe ɖo la ŋu, va se ɣeyiɣi si agbalẽwo katã ƒe ƒuƒoƒe la va ƒo ɖe agbalẽ ɖeka kple dzesi ɖeka me. Agbalẽ mamlɛtɔ ƒe kpɔɖeŋu wɔwɔ ko hia be woaxɔ ɖoɖonu blibo la dzi ase — eye esi le vevie ŋutɔ nye be Halo ƒe notary (ɖasefia ƒe ɖoɖo) wɔa eya ŋutɔ ƒe dzesiwo mekpɔa hia be authority si le gota naɖo eƒe seal ɖo o.
Nu ka ta mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe ɖeɖa le vevie
Le ɖoɖowo tsã me la, "seal" (CRS) tsoa vɔsa aɖe me. Ele be ame siwo va le vɔsa la me nagbã nudzɔdzɔ ƒe akpa siwo li le dome, eye ele be ame sia ame naxɔ dzi ase be wowɔe. Halo ƒe seal tsoa mathematics ko me: nusi aɖeke mele be woagbã o, nusi aɖeke mele be wòatsi o, eye vɔsa aɖeke mele be woaxɔ dzi ase o.
Nya Kpɔtɔ
Gbugbɔ ɖaseɖigbalɛwo
Gbugbɔ ɖaseɖigbalɛ ƒe ƒoƒo nana be ɖaseɖigbalɛ ɖeka naɖo ɖase tso ɖaseɖigbalɛ bubu siwo menye woƒe xexlẽme o ƒe nyateƒe ŋu, eye wòna xexlẽme (kple nyatakakawo) gã aɖe va ƒo ɖe kpuie me. Esia le vevie na nu ƒe dziyiyi, elabena ena be network la nadze edzi le akpa geɖe me, esi ame siwo le akpa aɖewo me hã ate ŋu axɔ network ƒe akpa si lia la ƒe blibonyenye dzi ase.
Hafi Halo va la, gbugbɔ ɖaseɖigbalɛ ƒe ƒoƒo wɔwɔ bia xexlẽme ƒe ga gã aɖe kple mɔ̃ ƒe ɖoɖo xexlẽnuwo. Nusiwo kpɔ wo la ƒe vevi aɖe nye mɔ aɖe si woyɔna be nested amortization: gbugbɔ ƒoƒo si zã polynomial adzɔgbeɖeɖe ƒe ɖoɖo si wotu ɖe inner product argument dzi, si wɔ dɔwɔwɔ nyuie ŋutɔ eye wòle mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe hiahiã ɖam.
Halo ƒe agbalẽ ɖe polynomial adzɔgbeɖeɖe ƒe ɖoɖo sia me blibo eye ekpɔ be ƒoƒo ƒe mɔ yeye aɖe le eme. Mɔ la na be ɖaseɖigbalɛ geɖe siwo ame vovovo wɔ le wo ŋutɔwo me la ƒe kpɔɖeŋu nawɔ kaba abe ɖaseɖigbalɛ ɖeka ƒe kpɔɖeŋu ene. Ne wòli eya ɖeŋu ko hã la, ena mɔ nyuitɔ wu zk-SNARKs si wozã le Zcash tsã.
Halo 2
Halo 2 nye zk-SNARK ƒe dɔwɔwɔ si wɔa dɔ nyuie ŋutɔ, si wòŋlɔ le Rust me, eye wòɖea mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe hiahiã ɖa, esi wòle teƒe ɖom na nu ƒe dziyiyi le Zcash me.
Eme le mɔ sia ƒe gɔmeɖeɖe gãtɔ aɖe si woyɔna be accumulation scheme. Ɖoɖoɖo sia fia ale si nested amortization wɔa dɔe nyateƒe: to ɖaseɖigbalɛwo ƒoƒo kpe ɖe nu si woyɔna be accumulator ŋu, afi si ɖaseɖigbalɛ sia sia ƒe nya tso accumulator ƒe nɔnɔme si do ŋgɔ ŋu la, woate ŋu akpɔ ɖaseɖigbalɛ siwo katã va yi la ɖeŋu (to induction) to accumulator ƒe nɔnɔme si le fifia ƒe kpɔɖeŋu wɔwɔ ko.
Le ɣeyiɣi ma ke me la, ha geɖe bubu hã le Polynomial IOPs siwo wɔ dɔ nyuie wu Sonic (si wozã le Halo 1) ƒe kpɔkpɔm, abe Marlin ene. Protocol si wɔ dɔ nyuie wu wo katã nye PLONK, si naa ablɔɖe gã aɖe le dɔwɔwɔ nyuie ƒe dɔwɔwɔwo ƒe ɖoɖo me, si dze ɖe dɔwɔwɔ ƒe hiahiãwo ŋu, eye wòna prover ƒe ɣeyiɣi nanye nyuitɔ 5× wu Sonic.
PLONK ƒe nukpɔkpɔ blibo
Halo le ekosystem gã la me
Electric Coin Company wɔ ɖeka kple Protocol Labs, Filecoin Foundation, kple Ethereum Foundation be woakpɔ Halo R&D ɖa, si me wòle ale si woate ŋu azã technology la le woƒe network vovovowo me hã. Ɖekaɖeka sia ƒe ta nye be wòana nu ƒe dziyiyi, ɖekawɔwɔ, kple ɣaɣla [privacy] nanye nyuitɔ le ekosystemwo katã me kple Web 3.0 ta.
Tsɔ kpe ɖe eŋu la, Halo 2 le MIT kple Apache 2.0 ƒe dɔwɔnu si ƒe teƒe ŋuti nya le ame sia ame ƒe asi me ƒe mɔ̃wo te, si fia be ame sia ame le ekosystem me ate ŋu atsɔ ɖasefia ƒe ɖoɖo la awɔ dɔ.
Filecoin. Tso eƒe dɔwɔwɔ gɔmedzedze me la, halo2 library la me va zã le dɔwɔwɔwo abe zkEVM ene me, eye ƒome siwo ate ŋu akpe Halo 2 ɖe ɖasefia ƒe ɖoɖo la me na Filecoin Virtual Machine hã li. Filecoin hia spacetime ƒe ɖasewo kple replication ƒe ɖasewo geɖe siwo xɔa ga; Halo 2 le vevie ŋutɔ le space ƒe zazã ƒoƒo kple network la ƒe nu ƒe dziyiyi nyuitɔ wɔwɔ me. Filecoin Foundation ƒe video kple Zooko. Eanye nyuitɔ na ekosystem eveawo hã ne Filecoin ƒe storage fexexewo ate ŋu woawɔ wo le ZEC me, si ana ɣaɣla ma ke na storage ƒe nuƒoƒo abe esi le Zcash ƒe ɣaɣla transfers me ene — si me wòle filewo ƒe ɣaɣlaŋlɔŋlɔ [encryption] le Filecoin storage me kple mobile clients ƒe kpekpeɖeŋu be woatsɔ media akpe ɖe Zcash ƒe nya kpui [memo] si woŋlɔ ɣaɣlaŋlɔŋlɔe ŋu. ECC × Filecoin ƒe blog ƒe nyatia
Ethereum. Wole Halo 2 ƒe ɖaseɖigbalɛ aɖe na Verifiable Delay Function (VDF) si wɔa dɔ nyuie ƒe wɔm. VDF nye crypto ƒe nu gɔmedzedze aɖe si ƒe zã nyawo [use case] geɖe li, si me wòle randomness si wòate ŋu awɔ dɔ sia sia na mɔ̃ŋlɔ ƒe dɔwɔwɔwo kple ŋgɔɖola ƒe tiatia le Proof of Stake me. ECC, Filecoin Foundation, Protocol Labs, kple Ethereum Foundation hã le dɔ wɔm kple SupraNational, ame si wɔa dɔ kple hardware-accelerated cryptography, be woakpɔ GPU kple ASIC ƒe dɔwɔwɔ na VDF la ɖa. Privacy and Scaling Explorations group le mɔ bubuwo si Halo 2 ƒe ɖaseɖigbalɛwo ate ŋu ana ɣaɣla kple nu ƒe dziyiyi nanye nyuitɔ na Ethereum la tom.
Dɔwɔwɔ bubu siwo zã Halo
- Anoma — ɖɔli ɖɔli [swap] ƒe protocol si me ɣaɣla le, si wɔa dɔ le ɖoɖonu geɖewo me
- Orbis — L2 zkRollup le Cardano dzi
- DarkFi — L1 zkEVM blockchain si me ɣaɣla le
- Scroll — L2 zkRollup le Ethereum dzi
Nu Siwo Wòfia Le Dɔwɔwɔ Me
Na Zcash ŋutɔ
- Orchard ƒe ɣaɣla gaƒuƒoƒo, si wɔ dɔ kple NU5, nye ɖaseɖigbalɛ ƒe ɖoɖo yeye sia ƒe dɔwɔwɔ le Zcash network la me. Woɖoe ɖe gaɖoɖowo ƒe xexlẽdzikpɔɖeƒe [turnstile] ƒe ɖoɖo ma ke si wozã le Sprout kple Sapling dome la te, be woaɖe ɣaɣla gaƒuƒoƒo tsãwo ɖa zi ɖe zi.
- Le NU5 (2022 ƒe titina) megbe la, gbugbɔ ɖaseɖigbalɛwo ƒe tsɔtsɔ ge ɖe eme zu nusi wòate ŋu wɔ, eye ɣaɣla ƒe nyonyo geɖe va kplɔe ɖo — si le vevie wu katã nye 'Actions' ƒe gɔmedzedze si tsɔ teƒe na inputs/outputs, si gbɔna gaɖoɖo ƒe metadata ƒe home.
- Mɔ̃ ƒe ɖoɖo xexlẽnuwo ƒe ɖeɖa ɖea afɔku si le system blibo me, si mele be woagbugbɔ awɔe na protocol ƒe yayra gã sia sia o.
Na nudzɔdzɔ ƒe tɔwo kple dɔwɔlawo
- Gbugbɔ ɖaseɖigbalɛ ƒe ƒoƒo ate ŋu afɔ xexlẽme si menye woƒe xexlẽme o ɖe kpuie me, awɔ distributed systems siwo woate ŋu akpɔ ɖeŋu, eye wòana Layer 1 ƒe ŋusẽ nasɔ gbɔ na ɣaɣla dzesi ŋɔŋlɔ blibo [full node] ƒe dɔwɔlawo — si le vevie na extensionwo abe Zcash Shielded Assets kple Zcash ƒe mɔɖoɖo siwo dzudzɔ ɣeyiɣi me ene.
Vodada Siwo Dzɔa Zã
| Nusi ame geɖe xɔe se | Nusi nye nyateƒe |
|---|
| "Halo nye yayra si gbɔna la si Zcash le lala ɖe." | Orchard, si le mainnet dzi tso NU5 (2022) me, le Halo 2 dzi xoxo. |
| "Mɔ̃ ƒe ɖoɖo xexlẽnuwo mele o fia be parameters aɖeke mele o." | Halo gale zã structured parameters; vovototoe nye be toxic waste mele wo me o, eye woate ŋu awɔ wo ɖo kple atrɔ wo me vɔsa si ame siwo va eme la hia be woaxɔe dzi ase o. |
| "Halo 2 kple Halo ƒe agbalẽ nye nu ma ke." | agbalẽ la ɖe polynomial adzɔgbeɖeɖe ƒe ɖoɖo kple nested amortization me; Halo 2 nye nyadzɔdzɔ me Rust ƒe dɔwɔwɔ si me accumulation scheme kple PLONKish arithmetisation le. |
| "Gbugbɔ ƒoƒo kpena ɖe gaɖoɖowo ƒuƒoƒe [block] ƒe kpɔɖeŋu wɔwɔ ƒe nu ƒe dziyiyi ko ŋu." | Gbugbɔ ƒoƒo hã fɔa application ƒe xexlẽme ɖe kpuie me — kpɔ Filecoin ƒe spacetime/replication ƒe ɖasewo kple VDF ƒe dɔwɔwɔ na Ethereum. |
Axɔ Ƒe Axa Siwo Kplɔe Ɖo
Nusrɔ̃ Ɖe Edzi
Dokumentewo
