Stanford’s Applied Cryptography Group Aims to Bulletproof Bitcoin

in #blockchain6 years ago (edited)

Stanford University’s Applied Cryptography Group (ACG) is proposing Bulletproofs, a way to drastically reduce blockchain data, roughly ten-fold. The ACG team argues how using aggregation for transaction proofs and reducing block size will result in two goals long sought in Bitcoin, confidentiality and speed.

Bitcoin’s Bulletproofs

Bulletproofs: Efficient Range Proofs for Confidential Transactions is a working publication from Stanford University’s Applied Cryptography Group. The project is overseen by professor Dan Boneh, and it involves PhD students and researchers from Stanford, University College London, and Blockstream. “Bulletproofs are designed to enable efficient confidential transactions in Bitcoin and other cryptocurrencies,” a background abstract begins.

A common misconception is transacting in bitcoin is somehow anonymous, confidential. The press often touts it as such, especially in the service of crime.

The irony of payment systems in the digital age is how public they are. Entire industries have been built up around gathering payment information, habits. Bitcoin is a step, for sure, toward thwarting institutional electronic payments’ invasiveness, but it is a long way from the anonymity of cash, for example.

“Confidential transactions hide the amount that is transferred in the transaction,” the paper continues, “Every confidential transaction contains a cryptographic proof that the transaction is valid. Bulletproofs shrink the size of the cryptographic proof from over 10kB to less than 1kB,” they claim.

Could Bulletproofs Ease the Scaling Debate?

Nothing in the paper overtly refers to the ongoing scaling debate, other than Bulletproofs assisting in scaling as a general idea. Those championing large block sizes have done so under the criticism of slow transaction times and higher fees. Meanwhile, status-quo arguments revolve around a bitcoin not reserved for micropayments, more for a settlement standard and store of value.

“If all Bitcoin transactions were confidential and used Bulletproofs, then the total size of the blockchain would be only 17 GB, compared to 160 GB with the currently used proofs,” authors Benedikt Bünz, Jonathan Bootle, Dan Boneh, Andrew Poelstra, Pieter Wiulle, Greg Maxwell insist.

zkSNARKs, popularized in ZCash, are precursors to Bulletproofs. However, “Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup,” which is the case with SNARKs.

“A Bulletproof can be used to convince a verifier that an encrypted plaintext is well formed. For example, prove that an encrypted number is in a given range, without revealing anything else about the number,” the ACG team asserts. The tradeoff in using Bulletproofs is in verification, as it is “more time consuming than verifying a SNARK proof.”

Block efficiency usage means the ACG proposal can “have many other applications in cryptographic protocols,” they write, “such as shortening proofs of solvency, short verifiable shuffles, confidential smart contracts, and as a general drop-in replacement for Sigma-protocols.”

@a-blockchain has examined issues relative to Bulletproofs with regard to confidentiality and a recent Mimblewimble testnet.

What do you think of Bulletproofs? Tell us in the comments below!

Images courtesy of: Pixabay, Remington, Twitter.


At @a-blockchain there’s a bunch of free helpful services. For instance, check out our Tools page!

Source

Sort:  

@a-blockchain (SPV) with the trustless anonymous payment hub Tumblebit seem to be
about privacy and scaling is discussed. In Bulletproofs, no trusted setup, but slower and with snarks, trusted set up but faster. Theres “Mimblewimble" too and talk of trust and preservation of anonymity and Btc integrity and trust too. Interesting times to say the least. Love the updates and news you provide too

Information is not knowledge.

- Albert Einstein

And the other 38% have been admitted to the mental institution because their pizza delivery guy is now worth millions

@a-blockchain This sounds very interesting and promising. I'm sure it will be well tested if it is to be used for BitCoin.

Coin Marketplace

STEEM 0.35
TRX 0.12
JST 0.040
BTC 70638.80
ETH 3565.34
USDT 1.00
SBD 4.73