SnarkPack: Practical SNARK Aggregation

Nicolas Gailly; Mary Maller; Anca Nitulescu

eprint.iacr.org will be offline for approximately an hour for routine maintenance at 11pm UTC on Tuesday, April 16. We lost some data between April 12 and April 14, and some authors have been notified that they need to resubmit their papers.

Paper 2021/529

SnarkPack: Practical SNARK Aggregation

Nicolas Gailly, Mary Maller, and Anca Nitulescu

Abstract

Zero-knowledge SNARKs (zk-SNARKs) are non-interactive proof systems with short and efficiently verifiable proofs that do not reveal anything more than the correctness of the statement. zk-SNARKs are widely used in decentralised systems to address privacy and scalability concerns. One of the main applications is the blockchain, were SNARKs are used to prove computations with private inputs and reduce on-chain footprint verification and transaction sizes. A major drawback of such proof systems in practice is the requirement to run a trusted setup for the public parameters. Moreover, these parameters set an upper bound to the sizeof the computations or statement to be proven, which results in new scalability problems. We design and implement SnarkPack, a new argument that further reduces the size of SNARK proofs by means of aggregation. Our goal is to provide an off-the-shelf solution that is practical in the following sense: (1) it is compatible with existing deployed SNARK systems, (2) it does not require any extra trusted setup. SnarkPack is designed to work with Groth16 scheme and has logarithmic size proofs and a verifier that runs in logarithmic time in the number of proofs to be aggregated. Most importantly, SnarkPack reuses the public parameters from Groth16 system. SnarkPack can aggregate 8192 proofs in 8.7s and verify them in 163ms, yielding a verification mechanism that is exponentially faster than batching and previous solutions in the field.SnarkPack can be deployed in blockchain applications that rely on many SNARK proofs such as Proof-of-Space or roll-up solutions.

Metadata

Available format(s): PDF
Category: Implementation
Publication info: Preprint. MINOR revision.
Keywords: public-key cryptography SNARKs proof aggregation bilinear pairings
Contact author(s): anca @ protocol ai
History: 2021-09-06: last of 10 revisions; 2021-04-23: received; See all versions
Short URL: https://ia.cr/2021/529
License: CC BY

BibTeX

@misc{cryptoeprint:2021/529,
      author = {Nicolas Gailly and Mary Maller and Anca Nitulescu},
      title = {SnarkPack: Practical SNARK Aggregation},
      howpublished = {Cryptology ePrint Archive, Paper 2021/529},
      year = {2021},
      note = {\url{https://eprint.iacr.org/2021/529}},
      url = {https://eprint.iacr.org/2021/529}
}