Introduction to Zero Knowledge 1000-2M23IZK
List of lectures
1-2) Introduction to zero knowledge:
3) Zero-knowledge for all NP
4) Zero-knowledge proof of knowledge
5) Witness indistinguishability (WI)
6) WI protocols are closed under parallel repetitions
7) A special case: Sigma protocols
8-9) AND and OR compositions of Sigma protocols
10) Non-interactive zero knowledge
11) Parallel and sequential composition of zero-knowledge
12) Introduction to secure multi-party computation (MPC) protocols
13-14) The "MPC in the head" technique with examples
15) Advanced topics, including protocols used for blockchains, such as Zero-Knowledge Succinct Non-Interactive Argument of Knowledge (zkSNARKS)
Requirements
Prerequisites
Course coordinators
Learning outcomes
The student will obtain preliminary knowledge on the zero-knowledge topic and will be able to understand how to correctly apply this technique in real-world scenarios.
The student will be able to check the correctness of a zero-knowledge proof system and will be able to use state-of-the-art zero-knowledge tools to create privacy-preserving systems.
Assessment criteria
The final grade is based on homeworks and the results of the oral exam.
Bibliography
Oded Goldreich "Foundations of Cryptography. II: Basic Applications"
Dan Boneh and Victor Shoup "A Graduate Course in Applied Cryptography"
Justin Thaler "Proofs, Arguments, and Zero-Knowledge"
Additional information
Information on level of this course, year of study and semester when the course unit is delivered, types and amount of class hours - can be found in course structure diagrams of apropriate study programmes. This course is related to the following study programmes:
- Bachelor's degree, first cycle programme, Computer Science
- Master's degree, second cycle programme, Computer Science
Additional information (registration calendar, class conductors, localization and schedules of classes), might be available in the USOSweb system: