[WIP] nullifier post #1

Divide-By-0 · 2022-11-09T23:20:24Z

Things left to do

Add colors to LaTeX'ed math
Make the text inside a numbered list or LaTeX equation the same size text instead of bigger text
Figure out how to add line breaks
Spice up the post by adding some images (screengrabs from the slides?)

Done

Added text to front page: If you’re excited by our mission, please reach out by twitter: our aim is to ensure everyone is included in the future of identity. To that end, we are especially excited to hear from traditionally underrepresented groups in technology, design, product development, research, or writing, such as women or bipoc.
Added unique pseudonimity post
Updated favicon to PL (moved to it's own PR)

…ullifier_post

RiverRuby

Love the overall structure of the post but think it's way too wordy rn. That can be fixed by cutting out extraneous explanation + adding in more diagrams to break up the text

RiverRuby · 2022-11-17T10:26:45Z

content/posts/nullifier.md

+
+This enables applications such as [semi-anonymous message boards](https://twitter.com/heyanonxyz), since a user merely needs to prove existence of at least 1 valid signature per message in order to be sure that such a message is legitimate. However, such applications have the advantage that there is no uniqueness constraint on the provers: that is, the same wallet proving themselves as a member multiple times is intended behavior. However, there are many applications that require a maximum of one action per user, like claiming an airdrop.
+
+**One address <-> one nullifier**


I think walking through why other solutions don't work is a super useful exercise, but it's just way too much text. Maybe if you did a numbered list of options? Or a table comparing each of the methods and which properties they have / don't have?

RiverRuby · 2022-11-17T10:27:49Z

content/posts/nullifier.md

+description: "Unique pseudonymity??"
+---
+
+**ZK ID systems**


Prefer not using "zk-id" term here, personal taste. Also this intro section feels bloated/wordy, perhaps it would better function as a standard paper intro where it goes through the sections of the rest of the blog post

content/posts/nullifier.md

RiverRuby · 2022-11-17T10:28:25Z

content/posts/nullifier.md

+
+Note that hash has to be a function that hashes directly to the curve, meaning the output is an (x, y) pair instead of a scalar. hash2 is a traditional hash function like sha256 or posiedon. This construction assumes the discrete log problem is hard. We use exponential notation here so you can apply your usual intuitions about discrete log, but these exponentiations are actually implemented as elliptic curve multiplications.
+
+```


Why not just use a picture here of LaTeX equations? Instead of putting text in directly?

yup, made it into LaTeX -- can't figure out how to properly line break and colors are annoying so might just screengrab instead

RiverRuby · 2022-11-17T10:29:35Z

content/posts/nullifier.md

+
+We hope that people will choose the appropriate algorithm for their chosen point on the interactivity-quantum secrecy tradeoff for their application, and hope that including this information helps folks make the right choice for themselves. Folks prioritizing shorter term secrecy, like DAO voting or confessions of the young who will likely no longer care when they’re old, might prioritize this document’s nullifier construction, but whistleblowers or journalists might want to consider the semaphore construction instead.
+
+**New usecases enabled**


This section feels like a bit of a repeat of previous examples covered. Maybe it'd be better to just mention all of these at the start and end with the definition of the nullifier?

lsankar4033 · 2022-11-22T21:55:57Z

Love the overall structure of the post but think it's way too wordy rn. That can be fixed by cutting out extraneous explanation + adding in more diagrams to break up the text

Agree with wordiness; I think more paragraphs can be broken at natural clause breaks to make the piece punchier.

But also may be too much effort at this stage and excited to see this go out! Imo not strictly necessary to do this prior to posting.

into nullifier_post

…ge wording

Divide-By-0 · 2022-12-24T11:11:15Z

Vivek feedback:

formatting rn makes it super hard to read, in particular the headers are h3 and that's kinda the same size as the text, easy fix to just use h1
storyboard / outline is hard to parse from headers cuz they're not very descriptive and they're all at the same level. adding more sections (and unfortunately a bit more introduction/conclusion type fluff) would really help with readability. and then a table of contents at the start would be perfect
i'm tryna be a fully LaTeX blog for our theoretical posts LOL so i'd appreciate doing something similar to the efficient ecdsa post where you have a table of variables and then walk through each of the steps in LaTeX instead of screenshotting your slides. this is gonna be slightly annoying but is so satisfying when it's finished. and you can pull the CSS from ecdsa post, i grinded so hard to make everything look pretty and work with hugo loool
the title "Unique Pseudonymity on Ethereum: Verifiably Deterministic Signatures on ECDSA" is a mouthful, can we try Nomen or Plume or something flashy even if it's not final lol
and then more opinionated ones:
The "ZK systems" blurb is a lot of repeated ideas from the previous efficent-ecdsa post. maybe we could make that easier for people to parse by either using the same vocabulary from the other post or just link to the other description in a natural way?
Would the quantum-secrecy tradeoff section be better as an appendix? and then maybe you can go into more depth on the stuff you brought up. also the attached diagram seems like it could be plotted better (with two axes?) but i'm not actually sure what that is in practice

Aayush Response

Re Tex-ing all equations is annoying due to color and layout
I'd j rather not if the pic is good enough
All the rest I can do
I don't see how 2 axes would help tho
Structure as appendix works, my personal style is anti appendix bc I want a conclusion to take into account all factors including appendices, but it's a good point that its not critical for core post

Vivek response

yeah no appendix is fine
but i'm gonna be more annoying about latex
i also think the colors are not that helpful
table of variables could be just as readable
it'd be really dope if we could have the table of variables as a dropdown in the header so ppl could refer to it as they're reading the post
yeah not 2 axes but this diagram is kinda hard to parse idk

Divide-By-0 and others added 5 commits November 9, 2022 18:17

added poorly formatted nullifier post

ddf06c0

Merge branch 'main' of https://github.com/personaelabs/website into n…

9a4093b

…ullifier_post

fix footnotes styling

cb23bee

updated favicon to say PL

0f336d4

added lowercase to headers and shortened title

417ca9f

RiverRuby suggested changes Nov 17, 2022

View reviewed changes

added latex support in hugo

3df519a

lsankar4033 self-requested a review November 22, 2022 21:56

Divide-By-0 added 6 commits November 23, 2022 14:44

Merge branch 'nullifier_post' of https://github.com/personaelabs/website

c957fc2

into nullifier_post

added latex to post, addressed some of viveks comments, fixed frontpa…

9f80f7e

…ge wording

merged main

ade9e96

added media

c9e4f1b

added images and notes about quantum proofing

58e068f

added more images and note on quantum

2402456

Divide-By-0 changed the title ~~added incompletely formatted nullifier post~~ [WIP] nullifier post Dec 7, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[WIP] nullifier post #1

[WIP] nullifier post #1

Divide-By-0 commented Nov 9, 2022 •

edited

Loading

RiverRuby left a comment

RiverRuby Nov 17, 2022

RiverRuby Nov 17, 2022

RiverRuby Nov 17, 2022

Divide-By-0 Nov 24, 2022

RiverRuby Nov 17, 2022

lsankar4033 commented Nov 22, 2022 •

edited

Loading

Divide-By-0 commented Dec 24, 2022


		This enables applications such as [semi-anonymous message boards](https://twitter.com/heyanonxyz), since a user merely needs to prove existence of at least 1 valid signature per message in order to be sure that such a message is legitimate. However, such applications have the advantage that there is no uniqueness constraint on the provers: that is, the same wallet proving themselves as a member multiple times is intended behavior. However, there are many applications that require a maximum of one action per user, like claiming an airdrop.

		One address <-> one nullifier


		Note that hash has to be a function that hashes directly to the curve, meaning the output is an (x, y) pair instead of a scalar. hash2 is a traditional hash function like sha256 or posiedon. This construction assumes the discrete log problem is hard. We use exponential notation here so you can apply your usual intuitions about discrete log, but these exponentiations are actually implemented as elliptic curve multiplications.

		```


		We hope that people will choose the appropriate algorithm for their chosen point on the interactivity-quantum secrecy tradeoff for their application, and hope that including this information helps folks make the right choice for themselves. Folks prioritizing shorter term secrecy, like DAO voting or confessions of the young who will likely no longer care when they’re old, might prioritize this document’s nullifier construction, but whistleblowers or journalists might want to consider the semaphore construction instead.

		New usecases enabled

[WIP] nullifier post #1

Are you sure you want to change the base?

[WIP] nullifier post #1

Conversation

Divide-By-0 commented Nov 9, 2022 • edited Loading

RiverRuby left a comment

Choose a reason for hiding this comment

RiverRuby Nov 17, 2022

Choose a reason for hiding this comment

RiverRuby Nov 17, 2022

Choose a reason for hiding this comment

RiverRuby Nov 17, 2022

Choose a reason for hiding this comment

Divide-By-0 Nov 24, 2022

Choose a reason for hiding this comment

RiverRuby Nov 17, 2022

Choose a reason for hiding this comment

lsankar4033 commented Nov 22, 2022 • edited Loading

Divide-By-0 commented Dec 24, 2022

Divide-By-0 commented Nov 9, 2022 •

edited

Loading

lsankar4033 commented Nov 22, 2022 •

edited

Loading