• Stars
    star
    306
  • Rank 136,456 (Top 3 %)
  • Language
    Rust
  • License
    Apache License 2.0
  • Created about 5 years ago
  • Updated 10 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A Rust library for the Marlin preprocessing zkSNARK

Marlin

marlin is a Rust library that implements a

preprocessing zkSNARK for R1CS
with
universal and updatable SRS

This library was initially developed as part of the Marlin paper, and is released under the MIT License and the Apache v2 License (see License).

WARNING: This is an academic prototype, and in particular has not received careful code review. This implementation is NOT ready for production use.

Overview

A zkSNARK with preprocessing achieves succinct verification for arbitrary computations, as opposed to only for structured computations. Informally, in an offline phase, one can preprocess the desired computation to produce a short summary of it; subsequently, in an online phase, this summary can be used to check any number of arguments relative to this computation.

The preprocessing zkSNARKs in this library rely on a structured reference string (SRS), which contains system parameters required by the argument system to produce/validate arguments. The SRS in this library is universal, which means that it supports (deterministically) preprocessing any computation up to a given size bound. The SRS is also updatable, which means that anyone can contribute a fresh share of randomness to it, which facilitates deployments in the real world.

The construction in this library follows the methodology introduced in the Marlin paper, which obtains preprocessing zkSNARKs with universal and updatable SRS by combining two ingredients:

  • an algebraic holographic proof
  • a polynomial commitment scheme

The first ingredient is provided as part of this library, and is an efficient algebraic holographic proof for R1CS (a generalization of arithmetic circuit satisfiability supported by many argument systems). The second ingredient is imported from poly-commit. See below for evaluation details.

Build guide

The library compiles on the stable toolchain of the Rust compiler. To install the latest version of Rust, first install rustup by following the instructions here, or via your platform's package manager. Once rustup is installed, install the Rust toolchain by invoking:

rustup install stable

After that, use cargo (the standard Rust build tool) to build the library:

git clone https://github.com/arkworks-rs/marlin.git
cd marlin
cargo build --release

This library comes with some unit and integration tests. Run these tests with:

cargo test

Lastly, this library is instrumented with profiling infrastructure that prints detailed traces of execution time. To enable this, compile with cargo build --features print-trace.

Benchmarks

All benchmarks below are performed over the BLS12-381 curve implemented in the ark-bls12-381 library, with the asm feature activated. Benchmarks were run on a machine with an Intel Xeon 6136 CPU running at 3.0 GHz.

Running time compared to Groth16

The graphs below compare the running time, in single-thread execution, of Marlin's indexer, prover, and verifier algorithms with the corresponding algorithms of Groth16 (the state of the art in preprocessing zkSNARKs for R1CS with circuit-specific SRS) as implemented in groth16. We evaluate Marlin's algorithms when instantiated with the PC scheme from [CHMMVW20] (denoted "M-AHP w/ PC of [CHMMVW20]"), and the PC scheme from [MBKM19] (denoted "M-AHP w/ PC of [MBKM19]").

Indexer Prover

Verifier

Multi-threaded performance

The following graphs compare the running time of Marlin's prover when instantiated with the PC scheme from [CHMMVW20] (left) and the PC scheme from [MBKM19] (right) when executed with a different number of threads.

Multi-threaded scaling of Marlin AHP with the PC scheme from [CHMMVW20] Multi-threaded scaling of Marlin AHP with the PC scheme from [MBKM19]

Proof size

We compare the proof size of Marlin with that of Groth16. We instantiate the Marlin SNARK with the PC scheme from [CHMMVW20], and the PC scheme from [MBKM19].

Scheme Proof size in bytes
Marlin AHP with PC of [CHMMVW20] 880
Marlin AHP with PC of [MBKM19] 784
[Groth16] 192

License

This library is licensed under either of the following licenses, at your discretion.

Unless you explicitly state otherwise, any contribution that you submit to this library shall be dual licensed as above (as defined in the Apache v2 License), without any additional terms or conditions.

Reference paper

Marlin: Preprocessing zkSNARKs with Universal and Updatable SRS
Alessandro Chiesa, Yuncong Hu, Mary Maller, Pratyush Mishra, Psi Vesely, Nicholas Ward
EUROCRYPT 2020

Acknowledgements

This work was supported by: an Engineering and Physical Sciences Research Council grant; a Google Faculty Award; the RISELab at UC Berkeley; and donations from the Ethereum Foundation and the Interchain Foundation.

More Repositories

1

snark

Interfaces for Relations and SNARKs for these relations
Rust
786
star
2

algebra

Libraries for finite field, elliptic curve, and polynomial arithmetic
Rust
601
star
3

poly-commit

A Rust library for polynomial commitments
Rust
319
star
4

curves

Implementations of popular elliptic curves
Rust
300
star
5

groth16

A Rust implementation of the Groth16 zkSNARK
Rust
236
star
6

circom-compat

Arkworks bindings to Circom's R1CS, for Groth16 Proof and Witness generation in Rust.
Rust
234
star
7

r1cs-tutorial

Tutorial for writing constraints in the `arkworks` framework
Rust
198
star
8

crypto-primitives

Interfaces and implementations of cryptographic primitives, along with R1CS constraints for them
Rust
160
star
9

r1cs-std

R1CS constraints for bits, fields, and elliptic curves
Rust
131
star
10

gemini

An elastic proof system based on arkworks
Rust
72
star
11

sumcheck

linear-time sumcheck protocol for multilinear polynomials and related addends
Rust
50
star
12

ripp

Argument systems for inner pairing products
Rust
41
star
13

nimue

Rust
37
star
14

std

A standard library wrapper for use in the `arkworks` ecosystem
Rust
37
star
15

pcd

Implementations of proof-carrying data
Rust
29
star
16

sponge

This library is archived; see crypto-primities for the latest version of this code
Rust
22
star
17

accumulation

Rust library for accumulation schemes
Rust
20
star
18

nonnative

R1CS constraints for non-native field arithmetic
Rust
19
star
19

ldt

An `arkworks` library for low-degree testing
Rust
18
star
20

dpc

A library for decentralized private computation
Rust
18
star
21

ivls

Implementation of incrementally verifiable ledger system
Rust
15
star
22

gm17

A Rust library for the preprocessing zkSNARK of Groth and Maller
Rust
8
star
23

bcs

Rust
8
star
24

template

github workflow templates
Python
5
star
25

arkworks-rs.github.io

SCSS
1
star