mpcsetup v0.10

[ewoolsey]

I see that there is the mpcsetup template in this repo with a bunch of utility functions. Is there a premade cli anywhere for the setup or is the best route to make my own? Would be really cool if these templates also generated the cli for this.

[gbotrel]

Hi, you can check out Binance CLI https://github.com/bnb-chain/zkbnb-setup (under Apache 2.0).

[ivokub]

My initial intuition is that it is sound - the random G2 factor is used for hiding property, but we're relying only on the binding property. But in that case it would make sense to fix G2 point instead of generating new.

cc @Tabaie.

[Tabaie]

I think the Pedersen key also needs to be MPC generated, if our threat model involves not trusting any single party with knowing the setup parameters
If a sole malicious party generates/knows the $\sigma$ factor they can pass off any $h\in G_1$ as a legitimate commitment by producing $\pi = h^\sigma$, thus breaking soundness.

I agree that $g\in G_2$ can be fixed.

[HSG88]

As @Tabaie mentioned, Pedersen key needs to be generated as part of the MPC setup. The use case in zkbnb didn't involve using Pedersen key and so it wasn't part of the MPC generated parameters.

[ewoolsey]

@gbotrel Thanks for the link. We were previously using a fork of that, but it's still on gnark 0.8 and there've been quite a few changes since then. I've started building a new version from scratch. @HSG88 or @Tabaie Could you elaborate on what the process should be for properly generating the Pederson key? I'm currently using mpcsetup.ExtractKeys to generate the vk, but that function leaves the pederson key empty.

Also, if you're interested, this is the branch I'm working on for the new setup.

[ewoolsey]

@Tabaie @HSG88 I've started some work generating the pedersen key via MPC. Made a post here. Looking for some feedback/assistance.