David Wong

cryptologie.net

cryptography, security, and random thoughts

Hey! I'm David, cofounder of zkSecurity, research advisor at Archetype, and author of the Real-World Cryptography book. I was previously a cryptography architect of Mina at O(1) Labs, the security lead for Libra/Diem at Facebook, and a security engineer at the Cryptography Services of NCC Group. Welcome to my blog about cryptography, security, and other related topics.

← back to all posts
◦

How does PLONK work? Part 8: A polynomial dance

blog

In this eighth video, I explain how the prover and the verifier can perform a “polynomial dance” in order to construct the circuit polynomial f. The principle is simple: the prover doesn’t want to leak information about the private inputs and the intermediary values in the circuit, and the verifier doesn’t want to give the prover too much freedom in the way they construct the circuit polynomial f.

Part 9 is here. Check the full series here.

suggested reads:
→ Understanding PLONK • blog
→ How does PLONK work? Part 7: A sketch protocol with our polynomial • blog
→ How does PLONK work? Part 3: Starting with the end: polynomials • blog
← back to all posts blog • 2021-08-17
currently reading:
How does PLONK work? Part 8: A polynomial dance
08-17 blog
recent posts:
New cryptologie.net
07-20 blog
Weaponizing AI Assistants: With Their Permission
07-20 blog
What are Schwartz-Zippel circuits? How do they relate to iterative constraint systems?
05-29 blog
Short Note On Montgomery Reduction: Why Operating Modulo b?
05-24 blog
Still confused by Plonk's permutation?
03-13 blog
📖 my book
Real-World Cryptography is available from Manning Publications.
A practical guide to applied cryptography for developers and security professionals.
🎙️ my podcast
Two And A Half Coins on Spotify.
Discussing cryptocurrencies, databases, banking, and distributed systems.
📺 my youtube
Cryptography videos on YouTube.
Video explanations of cryptographic concepts and security topics.