Zero Knowledge

In this episode, Anna and Nico speak with Abhi Shelat and Matteo Frigo from Google about their work integrating zero-knowledge proofs into the Google Wallet. They discuss the technical decisions behind the Anonymous Credentials for ECDSA system, including the challenge of designing a proof system where proving must be efficient enough to run on the client device in a large-scale consumer application, and how they design a system using sumcheck and Ligero to overcome NTT issues. The conversation also touches on the process of standardization, the return of ZK to its privacy roots, and the broader significance of seeing advanced cryptography adopted by a major tech company outside the blockchain space. Links: Episode 303: A Dive into Binius with Jim Posen Anonymous credentials from ECDSA libZK: a zero-knowledge proof library European Digital Identity FFTW Doubly-Efficient zkSNARKs Without Trusted Setup Ligero: Lightweight Sublinear Arguments Without a Trusted Setup Everything provable is prov