在2017年12月3日举办的亚太以太坊技术交流会上，以太坊创始人Vitalik Buter压轴出场，发表了主题为“以太坊区块链中的隐私保护”的演讲。
A presentation on the theme & ldquo; privacy protection & rdquao in the & chain of & & & & in the & & & & & & & & & & & & & & & & & & & & & & & & & & & & & & ; & & & & & & & & & & ; & & & & & & & & ; & & & & & & & ; & & & & & & & & & & & & ; & & & & & & & & & & & & & & & & & ; & & & & & & & & & ; & & & & & & & & & & & & & & & & & & & ; & & & & & & & & & & & & ; & & & & & & & & & & & ) & & & & & & & & & & ) & & & & & & & & & & & & & & & & & & & & & & & & & ) ) ) & & & ) ) ) & & & & & & & & & & & & ) & ) ) ) & & & & ) ) ) & & & & & & & & & & ) ) & & & & & & & & & & &
在演讲过程中，V神提及以太坊隐私性的问题已经被解决了四分之三了，但还有四分之一没有解决；同时，他特别强调：零知识证明(Zero knowledge proofs)是“最为强大”的解决方案，尽管技术实现难度最高，但在保护以太坊网络的隐私性和安全性上，其效果最佳。
In the course of his speech, God V mentioned that three quarters of Ether's privacy had been resolved, but that one quarter remained unresolved; at the same time, he stressed, inter alia, that the Zero Knowledge Certificate was & & & & & & & & & & ; that the solution, while technology was the most difficult to achieve, was the most effective in protecting the privacy and security of Etheraya's network.
那么，以太坊掌门人口中的“零知识证明”到底是何方神圣？它又为何备受瞩目呢？
So, where is the & & & & & & & & & & & & & where is the & & & & & & where is it? Why is it so visible?
一般来说，我们该怎么去描述零知识证明？
In general, how do we describe the proof of zero knowledge?
我们可以这样来理解，你拥有着一些数字，同时也存在着一个有空缺的等式，你需要证明的是你无需借助任何其他知识，知道填入这个等式的数字是什么，从而使这个等式成立。
We can understand in this way that you have some numbers and there is an equation with vacancies, and what you need to prove is that you do not need any other knowledge to know what to fill in this equation, so that it can be established.
这个等式用的数字无论经过加密与否，所有人都能看到，如果它能够让等式成立，这就是零知识证明，不需要经过其他底层数据的辅助即可直接通过验证。
The number used in this equation, whether encrypted or not, can be seen by all, and if it allows the equation to be established, this is proof of zero knowledge, which can be verified directly without the aid of other bottom-level data.
我们知道，区块链全部节点通过共识机制确认交易的合法性，而能达成共识的前提是所有数据都在全节点上透明可见，其中当然也包括个人隐私数据。虽然部分区块链系统引入了“假名”的机制，但其隐私保护的力度远远不够。我们将这个问题总结为个体隐私与群体共识的矛盾。
We know that all the nodes of the block chain confirm the legitimacy of the transaction through a consensus mechanism, and that consensus is achieved on the premise that all data are transparent throughout the node, including, of course, personal privacy data. While some block chain systems have introduced “ pseudonyms & rdquo; mechanisms, their privacy protection is far from adequate. We summarize this issue as a contradiction between individual privacy and group consensus.
零知识证明是解决该矛盾最为成熟和强大的工具。简言之，零知识证明可以让对方既不知道具体内容，又能确认该内容的有效性。对应着区块链中所有节点，既可以确认交易的合法性，同时也无需知道交易的具体内容。区块链的兴起将零知识证明从相对小众的密码学概念逐渐变成显学，不仅仅是技术人员对这一“神奇”技术的好奇心，也是用户对个人隐私数据越来越重视的一种必然结果。
Zero knowledge has proved to be the most mature and powerful tool for resolving this contradiction. In short, zero knowledge has proved to make it possible for the other side to know neither the specifics nor the validity of the content. Corresponding to all nodes in the block chain, it has been possible to confirm the legitimacy of the transaction without knowing the exact content of the transaction.
然而，以太坊V神提出的四分之一尚未解决的问题，在国内或许已经不是问题了。近日，区块链代表企业矩阵元称其已经在零知识证明上取得了一定的突破。
However, one-quarter of the unresolved issues proposed by Ethio V may no longer be a problem in the country. In recent days, the block chain represents a business matrix that says that it has made some breakthroughs in the proof of zero knowledge.
针对以太坊的账户模型，采用加法同态加密。同时，针对转账这种具体场景进行代数结构的优化，完备的支持以太坊的智能合约。在性能行矩阵元的方案的证明时间只需要70ms左右，且消耗的内存<；4M，即使是普通的智能手机也可以完成计算。
At the same time, the algebra structure is optimized for the transfer of a specific scenario, with full support for the community’s smart contracts. The proof time for a performance matrix is only about 70 ms and the memory & lt; and 4M, even a normal smartphone, can be calculated.
从区块链的应用角度出发，目前的零知识证明主要有两种模式。一种是针对特定的应用场景进行方案构造。在区块链世界中，最为常见的就是转账的场景。用户A向用户B转账，用零知识证明保证其他所有节点即不知道A、B的账户余额、转账金额，又能让其确认该交易是合法的。
From the point of view of the application of the block chain, there are two main models for current zero knowledge. One is the construction of a programme for specific applications. In the block chain world, the most common is the transfer scenario. User A transfers to User B, using zero knowledge to prove that all other nodes are not aware of the account balances of A, B, and the amount of the transfer, which allows it to confirm that the transaction is legal.
所谓合法，即A有足够的余额供其转账。现在业界常说的到Ring Confidential Transaction技术（RingCT，采用的环签名,ring signature，实际是一种特殊的零知识证明方案），Zcash中使用到的zk-SNARK技术都是在解决这一特定的场景。
So-called legal, A, has enough balance to transfer it. Now the industry is talking about Ring Federal Transport technology (RingCT, the ring signature used, the ring signature, which is actually a special zero-knowledge proof program), and the zk-Snark technology used in Zcash is addressing this particular scenario.
这两种应用的技术都存在一定的不足之处。首先，这两种技术都是针对UTXO模型，UTXO为零知识证明的构造带来了一定的便利性，因为新转出的资金会对应在一个新的地址下（都是B所有的地址），而不需要对B原始地址下的余额进行修改。从而无法直接推广到以太坊账户模型（直接在原地址上进行余额变动）。此外，zk-SNARK为了达到极致短的验证时间，从而牺牲了证明生成的时间。在ZCash网络中，40s的证明生成时间，3G的内存消耗，只有部分计算能力资源丰富的全节点有能力完成这样的计算。即使ZCash更新后的版本证明时间和内存消耗分别也在7s和40M，也极大地限制了其适用。
In the first place, both of these technologies are designed for the UTXO model, where UTXO is a zero-knowledge proof construction, since the newly transferred funds should be under a new address (all B-owned) without the need to modify the balance under the original B address. It is not possible to extend directly to the Ether Account model (which changes the balance directly on the original address). Moreover, Zk-Snark has sacrificed the time of production in order to achieve a very short validation time. In ZCash, the time of production of the `40s'certificate, the internal consumption of 3Gs, and only a part of the full section with the capacity to calculate resources, has the capacity to perform such calculations. Even the updated version of ZCash shows that time and internal consumption are also 7s and 40Ms, respectively, greatly limiting its application.
而上面我们提到，矩阵元的方案证明时间只需要70ms左右，且消耗的内存<；4M，即使是普通的智能手机也可以完成计算。结果显而易见。
And what we have mentioned above is that the array dollar programme takes about 70 ms of time and consumes memory & lt; 4M, even a normal smartphone, can do the calculations. The results are obvious.
以太坊支持的图灵完备的智能合约极大的丰富了区块链的应用场景。同样为应对不同应用场景的隐私保护，通用的零知识证明方案是必不可少的工具，这也是零知识证明的另外一种模式。然而，零知识证明的方案对广大技术开发者依然有较高的门槛。
In response to the privacy protection of different applications, a common zero-knowledge proof programme is an essential tool, another model of zero-knowledge proof. However, zero-knowledge proof programmes still have a high threshold for a wide range of technology developers.
为了让开发者方便使用零知识证明来提供不同场景的隐私保护，矩阵元将在明年推出零知识证明服务（NIZK as a service）。在JUICE区块链开放服务平台上提供一层NIZK服务，开发者只需使用高级语言编写需要证明的具体内容，内嵌的编译器将自动将其转换生成零知识证明。同样，该服务也可自动验证不同场景下的证明。矩阵元将继续在零知识证明上进行投入，降低开发者使用门槛。
In order to make it easier for developers to use zero-knowledge certificates to provide privacy protection for different scenarios, the Matrix will launch a zero-knowledge certification service (NIZK as a service) next year. A layer of NIZK services will be available on the JUICE Block Chain Open Services platform, where developers only need to use advanced languages to produce specific content that requires proof, and embedded compilers will automatically convert them into zero-knowledge certificates.
免责声明：本文仅代表作者个人观点，与本网无关，其原创性及文中内容未经本站证实，本站不对内容的真实性、完整性、准确性给予任何保证或承诺，仅供读者参考。如本文内容影响到您的合法权益（含文章中内容、图片等），请及时联系本站，我们会进行相应处理。
This document only represents the author’s personal views, and is not related to the web, and its originality and contents are not confirmed by the site, which does not provide any guarantees or commitments about the authenticity, completeness, accuracy of the content for the reader’s information only.
注册有任何问题请添加 微信：MVIP619 拉你进入群
打开微信扫一扫
添加客服
进入交流群
发表评论