Understanding the Moon Math of ZK Snarks workshop
summary
Step-by-step construction of a Groth16 proof by hand: statement "x1x2x3 = x4 mod 13" becomes an algebraic circuit, then R1CS → QAP polynomials, with chosen evaluation points 5 and 7 and target T(x)=x^2+x+9; setup uses a tiny toy BLS curve called BLS66 toy curve over F43 with a 13‑element subgroup; CRS comes from alpha,beta,gamma,delta; prover outputs two G1 and one G2 group elements and verification reduces to three pairings — all computed by hand and shown to work.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:00Examples of ZK Snarks
- 5:45Example
- 7:40Algebraic Circuit
- 12:30Transform
- 16:55Target polynomial
- 17:17Lagrange interpolation
- 29:14Proof
- 33:27Conclusion
related talks
23mSonic: Nearly Trustless SNARK Setups
56mCollaborative zk-SNARKs: Proving as One over Distributed Secrets
39mPrivacy and Evolution of SNARKs
18mSoK: Understanding zk-SNARKs: The Gap Between Research and Practice
01h 09mProofs - Practice 1
52mFaster, Smaller, Weaker, Darker
18mA Selection of Pairing Based zk-SNARKs
36mPanel Discussion