Dora: Processor Expressiveness is (Nearly) Free in Zero-Knowledge for RAM Programs

ePrint Report: Dora: Processor Expressiveness is (Nearly) Free in Zero-Knowledge for RAM Programs

Aarushi Goel, Mathias Hall-Andersen, Gabriel Kaptchuk

Existing protocols for proving the correct execution of a RAM program in zero-knowledge are plagued by a processor expressiveness trade-off : supporting fewer instructions results in smaller processor circuits (which improves performance), but may result in more program execution steps because non-supported instruction must be emulated over multiple processor steps (which diminishes performance).


We present Dora, a concretely efficient zero-knowledge protocol …

dora eprint report free knowledge processor program protocols report results trade