论文标题
基于ZK-SNARK的比特币交易所资产协议证明
A ZK-SNARK based Proof of Assets Protocol for Bitcoin Exchanges
论文作者
论文摘要
本文提出了一种使用零知识简洁的知识不相互互动论点（ZK-SNARK）的协议，以证明比特币交换的资产证明，而无需揭示交换的比特币地址或与这些地址相关的余额的余额。资产的证明是证明该交易所有权使用其私钥支出的比特币总价值的机制。我们构建了一个保护隐私的ZK-SNARK证明系统，以证明与交换的比特币资产相对应的私钥的知识。 ZK-SNARK工具链有助于转换NP序列，以证明私钥（交换已知）的知识为电路满意度问题。在此协议中，交易所为与每个地址关联的比特币的价值创造了Pedersen承诺，而无需透露余额。仿真结果表明，证明生成时间，大小和验证时间在实践上是有效的。
This paper proposes a protocol for Proof of Assets of a bitcoin exchange using the Zero-Knowledge Succinct Non-Interactive Argument of Knowledge (ZK-SNARK) without revealing either the bitcoin addresses of the exchange or balances associated with those addresses. The proof of assets is a mechanism to prove the total value of bitcoins the exchange has authority to spend using its private keys. We construct a privacy-preserving ZK-SNARK proof system to prove the knowledge of the private keys corresponding to the bitcoin assets of an exchange. The ZK-SNARK tool-chain helps to convert an NP-Statement for proving the knowledge of the private keys (known to the exchange) into a circuit satisfiability problem. In this protocol, the exchange creates a Pedersen commitment to the value of bitcoins associated with each address without revealing the balance. The simulation results show that the proof generation time, size, and verification time are efficient in practice.
