Damus
conduition profile picture
conduition
@conduition
"Sell me this preimage."

You can verifiably purchase the solution to any NP-Complete problem using Bitcoin (and Lightning), combined with zero-knowledge proofs.

- Buy the solution to a sudoku puzzle
- Buy the prime factors of an RSA key
- Bridge HTLCs with PTLCs
- Buy a valid proof-of-work
- and more...

https://conduition.io/bitcoin/zkpreimage/
59โค๏ธ9๐Ÿ‘€4โค๏ธ2๐Ÿš€1๐Ÿค™1๐Ÿฅœ1
waxwing · 70w
Interesting project! What kind of proving times are you getting? Say a sudoku for argument's sake. Also are you aware of the flaw in the original zkcp demo by bowe and maxwell? (To do with witness indistinguishability). Maybe it doesn't apply because STARKs not SNARKs but just wondering.
Bryan · 70w
Thanks for the detailed breakdown and explanation. I really enjoyed this article and hope PTLC's can eventually get implemented. It also gives me an extra reason to keep my node up to date, and with taproot enabled.
trest · 70w
Thank you for great explanation. I think the size of proofs is incorrectly listed (swapped) in comparison table. STARKs shall be in kilobytes, not SNARKs