About this episode
In this episode Anna Rose and Nico Mohnblatt chat with Binyi Chen, researcher at Stanford University. They discuss his work on lattice-based folding schemes, revisit LatticeFold and LatticeFold+, and cover how lattices enable low-cost, post-quantum-secure folding by replacing Pedersen hashes with Ajtai commitments. They discuss the early folding work from 2023 and how it has evolved and explore the advantages of lattices over other approaches in the folding context while also highlighting their tradeoffs.
Binyi goes on to introduce Symphony, his new work that eliminates the need to implement Fiat-Shamir in the recursive verification circuit, and describes how that improves efficiency and removes the chances for a KRS-style attack.
Related Links
Further Reading
Aztec is a privacy-first Layer 2 on Ethereum supporting smart contracts with both private and public state and execution. Details about Aztec’s technology, research, and community programmes are available at aztec.network.
Check out the latest jobs in ZK at the ZK Podcast Jobs Board.
**If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript
- Binyi Chen’s Website
- LatticeFold: A Lattice-based Folding Scheme and its Applications to Succinct Proof Systems
- LatticeFold+: Faster, Simpler, Shorter Lattice-Based Folding for Succinct Proof Systems
- Symphony: Scalable SNARKs in the Random Oracle Model from Lattice-Based High-Arity Folding
- Protostar: Generic Efficient Accumulation/Folding for Special-sound Protocols
- ZK Whiteboard Sessions:SEASON 3 MODULE 3: Lattice-based SNARKs, w/ Vadim Lyubashevsky
- ZK Whiteboard Sessions:SEASON 3 MODULE 4: LatticeFold, w/ Binyi Chen
- Implementing LatticeFold with Matthew and Albert from Nethermind
- Lattice-based ZK Systems with Vadim Lyubashevsky
Further Reading
- Generating Hard Instances of Lattice Problems by M. Ajtai
- SWIFFT: A Modest Proposal for FFT Hashing
- Delegating Computation: Interactive Proofs for Muggles
- How to Prove False Statements: Practical Attacks on Fiat-Shamir
- BaseFold: Efficient Field-Agnostic Polynomial Commitment Schemes from Foldable Codes
- Blaze: Fast SNARKs from Interleaved RAA Codes
- Neo: Lattice-based folding scheme for CCS over small fields and pay-per-bit commitments
- LaBRADOR: Compact Proofs for R1CS from Module-SIS?
Aztec is a privacy-first Layer 2 on Ethereum supporting smart contracts with both private and public state and execution. Details about Aztec’s technology, research, and community programmes are available at aztec.network.
Check out the latest jobs in ZK at the ZK Podcast Jobs Board.
**If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript
Get every episode summarized
Each time Zero Knowledge publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Zero Knowledge
The Evolution from ZKP2P to Peer with Richard Liang
Zero Knowledge
Sep 9, 202646:00completed
Minimmit, Multimmit and the New Consensus Frontier with Patrick O'Grady
Zero Knowledge
Aug 5, 20261:12:01pending
Private Information Retrieval (PIR) with Alex Hoover
Zero Knowledge
Jul 29, 20261:04:13pending
Alex Ozdemir on where Theorem Provers and ZK meet
Zero Knowledge
Jul 15, 20261:01:57pending