面向EVM兼容区块链的ZK友好哈希函数与SNARK证明系统基准测试
Benchmarking ZK-Friendly Hash Functions and SNARK Proving Systems for EVM-compatible Blockchains
AI总结：
本文在bn254曲线和circom-snarkjs框架下基准测试了三种SNARK证明系统与五种ZK友好哈希函数，并提出引入排序器的隐私保护交易方案，证明Poseidon2在EVM链上可降低73%链上成本。
摘要：
随着零知识证明（ZKPs），特别是简洁非交互式知识论证（SNARKs）的快速发展，对各种ZK工具进行基准测试已成为一项有价值的工作。ZK友好哈希函数作为区块链中的关键算法，已引起广泛关注。因此，在ZK电路中对这些不断演进的算法进行全面基准测试与评估，既带来了良好机遇，也提出了挑战。此外，我们关注一种流行的ZKP应用——隐私保护交易协议，旨在通过“批处理”利用SNARKs的成本效率，以解决链上成本过高和合规性问题。为此，我们在circom-snarkjs框架内的bn254曲线上，对三种SNARK证明系统和五种ZK友好哈希函数进行了基准测试，其中包括我们自行开发的Poseidon2、Neptune和GMiMC电路模板。我们还在基于SNARK的隐私保护交易方案中引入了“排序器”角色，以提升效率并实现灵活审计。我们开展了隐私与安全分析，并在以太坊虚拟机（EVM）兼容链上进行了实现与评估。结果表明，在Groth16下，Poseidon和Poseidon2在证明生成期间展现出更优的内存占用和运行时间。此外，与基线相比，Poseidon2不仅生成证明更快，还在EVM链上将链上成本降低了73%，在Hedera上降低了近26%。我们的工作为ZK友好哈希函数和ZK工具提供了基准，同时探索了基于ZKP的隐私保护交易协议中的成本效率与合规性。
英文摘要：
With the rapid development of Zero-Knowledge Proofs (ZKPs), particularly Succinct Non-Interactive Arguments of Knowledge (SNARKs), benchmarking various ZK tools has become a valuable task. ZK-friendly hash functions, as key algorithms in blockchain, have garnered significant attention. Therefore, comprehensive benchmarking and evaluations of these evolving algorithms in ZK circuits present both promising opportunities and challenges. Additionally, we focus on a popular ZKP application, privacy-preserving transaction protocols, aiming to leverage SNARKs' cost-efficiency through "batch processing" to address high on-chain costs and compliance issues. To this end, we benchmarked three SNARK proving systems and five ZK-friendly hash functions, including our self-developed circuit templates for Poseidon2, Neptune, and GMiMC, on the bn254 curve within the circom-snarkjs framework. We also introduced the role of "sequencer" in our SNARK-based privacy-preserving transaction scheme to enhance efficiency and enable flexible auditing. We conducted privacy and security analyses, as well as implementation and evaluation on Ethereum Virtual Machine (EVM)-compatible chains. The results indicate that Poseidon and Poseidon2 demonstrate superior memory usage and runtime during proof generation under Groth16. Moreover, compared to the baseline, Poseidon2 not only generates proofs faster but also reduces on-chain costs by 73% on EVM chains and nearly 26% on Hedera. Our work provides a benchmark for ZK-friendly hash functions and ZK tools, while also exploring cost efficiency and compliance in ZKP-based privacy-preserving transaction protocols.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
