Diff between ece43ea5 (main) and b8595a83 (PR)

• stone +1 -0 Viewed

  • zkCatalogInfo +1 -0 Viewed

    {
      "creator": "Starkware",
      "projectsForTvs": [
        {
          "projectId": "starknet",
          "sinceTimestamp": 1638140400,
          "untilTimestamp": 1760824800
        },
        {
          "projectId": "paradex",
          "sinceTimestamp": 1696111200,
          "untilTimestamp": 1763997779
        },
        {
          "projectId": "immutablex",
          "sinceTimestamp": 1617832800,
          "untilTimestamp": 1772672831
        },
        {
          "projectId": "sorare",
          "sinceTimestamp": 1627250400
        },
        {
          "projectId": "brine",
          "sinceTimestamp": 1682546400
        },
        {
          "projectId": "myria",
          "sinceTimestamp": 1661464800
        },
        {
          "projectId": "deversifi",
          "sinceTimestamp": 1591135200
        },
        {
          "projectId": "dydx",
          "sinceTimestamp": 1617660000
        },
        {
          "projectId": "edgex",
          "sinceTimestamp": 1722636000
        },
        {
          "projectId": "layer2financezk",
          "sinceTimestamp": 1645130774
        }
      ],
      "proofSystemInfo": "\n    \n    ## Description\n\n    Stone is a STARK proof system that is designed to prove the execution of programs written in [Cairo language](https://www.starknet.io/cairo-book/title-page.html) and compiled into Cairo assembly (cASM) byte code. This ISA is highly optimized for the performance of zkVM proving. Stone verifies STARK proofs directly onchain without any final SNARK wraps and thus requires no trusted setup. Stone targets 80 bits of security (e.g. see constructor params on [this contract](https://etherscan.io/address/0x3d57526c1C8D63fa2A8704487Df65e9000166c8E#code)).\n\n    ## Proof system\n\n    Stone is a Cairo-based zkVM with AIR arithmetization over [felt252 field](https://docs.starknet.io/archive/cairo-101/felt/) and FRI-based commitment. The protocol makes use of recursive proof aggregation among many projects utilizing the CairoVM (i.e. Starknet forks and StarkEx systems) using SHARP. Some documentation on the aggregation scheme can be found [here](https://docs.starknet.io/architecture/sharp/) and the Cairo verifier implemented in Cairo can be found [here](https://github.com/starkware-libs/cairo-lang/tree/v0.13.1/src/starkware/cairo/cairo_verifier/layouts/all_cairo).\n\n    ### StarkNet Operating System (SNOS)\n\n    The base layer of Stone proving is a Cairo program called [SNOS](https://docs.starknet.io/architecture/os/) that proves the correct STF from one state to another given the list of transactions. SNOS execution includes checking transaction inputs (e.g. state), executing transactions and processing state diffs. The source code of the Starknet OS can be found [here](https://github.com/starkware-libs/cairo-lang/tree/ee7ce74e1159a349d4b77a5f952241b50b1692de/src/starkware/starknet/core/os).\n\n    ### Recursive aggregation\n\n    Proofs of SNOS executions of several consecutive blocks are recursively aggregated. The correctness of this aggregation is checked by [applicative bootloader](https://github.com/starkware-libs/cairo-lang/blob/8e11b8cc65ae1d0959328b1b4a40b92df8b58595/src/starkware/cairo/bootloaders/applicative_bootloader/applicative_bootloader.cairo#L15) program, which also verifies the correct relation of corresponding SNOS inputs and outputs. Applicative bootloader proofs are aggregated across several blockchains and proven by [SHARP](https://docs.starknet.io/architecture/sharp/#what_is_sharp). The SHARP STARK proof is verified onchain without any SNARK wraps.\n    ",
      "quantumResistant": true,
      "techStack": {
        "zkVM": [
          {
            "id": "Stone",
            "type": "STARK",
            "name": "Stone",
            "description": "zkVM STARK proving system developed by Starkware for Cairo programs, including state transition of Starknet."
          },
          {
            "id": "CASM",
            "type": "ISA",
            "name": "Cairo ASM",
            "description": "Instruction language for Cairo VM developed by Starkware."
          },
          {
            "id": "felt252",
            "type": "Field",
            "name": "felt252",
            "description": "Prime field of order p = 2**251 + 17 * 2**192 + 1."
          }
        ]
      },
      "trustedSetups": [
        {
          "id": "TransparentSetup",
          "name": "Transparent setup",
          "risk": "N/A",
          "shortDescription": "No trusted setup and no additional setup-related trust assumptions.",
          "longDescription": "Transparent proving systems require no trusted setups and have no additional setup-related trust assumptions.",
          "proofSystem": {
            "id": "Stone",
            "type": "STARK",
            "name": "Stone",
            "description": "zkVM STARK proving system developed by Starkware for Cairo programs, including state transition of Starknet."
          }
        }
      ],
      "verifierHashes": [
        {
          "hash": "0x5ed8957171b466464570ba10b3d5c5adfc54546ba56278129af5ae63a0d4ad22",
          "name": "Stone verifier 2024_10",
          "sourceLink": "https://etherscan.io/address/0x9fb7F48dCB26b7bFA4e580b2dEFf637B13751942#code",
          "proofSystem": {
            "id": "Stone",
            "type": "STARK",
            "name": "Stone",
            "description": "zkVM STARK proving system developed by Starkware for Cairo programs, including state transition of Starknet."
          },
          "knownDeployments": [
            {
              "address": "eth:0x9fb7F48dCB26b7bFA4e580b2dEFf637B13751942",
              "overrideUsedIn": [
                "edgex",
                "myria",
                "sorare",
                "brine"
              ]
            }
          ],
          "verificationStatus": "successful",
          "verificationSteps": "Onchain stone verifier smart contracts contain code that directly checks proofs of correct Cairo program execution. Unlike SNARK final wraps, it does not contain any additional cryptographic components that need to be independently regenerated because it introduces no new zk circuits. The sources are verified on etherscan and can be examined directly to check the correct implementation of STARK verification protocol.",
          "description": "Custom verifier ID: SHA256 hash of the address of the immutable verifier smart contract (GpsStatementVerifier) in hex string format '0x...'."
        }
      ]
    }

• stwo +1 -0 Viewed

  • zkCatalogInfo +1 -0 Viewed

    {
      "creator": "Starkware",
      "projectsForTvs": [
        {
          "projectId": "starknet",
          "sinceTimestamp": 1760824800
        },
        {
          "projectId": "paradex",
          "sinceTimestamp": 1763997779
        }
      ],
      "proofSystemInfo": "\n## Description\n\nStwo is the next iteration of Starkware zkVM STARK system. It is intended to prove the execution of programs written in [Cairo language](https://www.starknet.io/cairo-book/title-page.html) and compiled into Cairo assembly (cASM) byte code, however it also allows writing custom AIR to be proven. Stwo verifies STARK proofs directly onchain without any final SNARK wraps and thus requires no trusted setup. \n\nStwo targets 96 bits of cryptographic security + 30 bits of PoW grinding security (e.g. see constructor params on [this contract](https://etherscan.io/address/0x3d57526c1C8D63fa2A8704487Df65e9000166c8E#code)). Here PoW grinding refers to a challenge that prover needs to compute every time they generate a proof. An honest prover performs the work only once but a malicious prover has additional computational load with every attempted forging of a proof.\n\n## Proof system\n\nStwo proof system is a zkVM working with AIR arithmetizations over Mersenne31 field. [This stwo-cairo toolkit](https://github.com/starkware-libs/stwo-cairo/tree/main) allows compiling Cairo program traces to the AIR arithmetization, however it is possible to create custom AIRs to be proven by Stwo, see more [here](https://zksecurity.github.io/stwo-book/air-development/index.html). \n\nStwo offers several innovations to optimize proving time. Firstly, its use of small Mersenne31 field compared to previous version [felt252 field](https://docs.starknet.io/archive/cairo-101/felt/) is much better aligned with CPU arithmetics, also operations over M31 could be highly optimized as explained [here](https://zksecurity.github.io/stwo-book/how-it-works/mersenne-prime.html). Secondly, Stwo implements a circle STARK as introduced in [this paper](https://eprint.iacr.org/2024/278). Thirdly, Stwo prover now uses Blake2 hash function instead of Poseidon, which is more efficient.\n\n### Circle STARKs\n\nCircle STARKs replace interpolation domain without any structure with an interpolation domain with a structure of a circle domain, where points of interpolation are chosen from a complex unit circle over Mersenne31 field. It allows using Circle FFT algorithm, which speeds up the interpolation step in STARK proving, as well as Circle FRI algorithm for low-degree polynomial testing.\n\n### StarkNet Operating System (SNOS)\n\nThe base layer of Stwo proving L2s is a Cairo program called [SNOS](https://docs.starknet.io/architecture/os/) that proves the correct STF from one state to another given the list of transactions. SNOS execution includes checking transaction inputs (e.g. state), executing transactions and processing state diffs. The source code of the Starknet OS can be found [here](https://github.com/starkware-libs/cairo-lang/tree/ee7ce74e1159a349d4b77a5f952241b50b1692de/src/starkware/starknet/core/os).\n\n### Recursive aggregation\n\nProofs of SNOS executions of several consecutive blocks are recursively aggregated. The correctness of this aggregation is checked by [applicative bootloader](https://github.com/starkware-libs/cairo-lang/blob/8e11b8cc65ae1d0959328b1b4a40b92df8b58595/src/starkware/cairo/bootloaders/applicative_bootloader/applicative_bootloader.cairo#L15) program, which also verifies the correct relation of corresponding SNOS inputs and outputs. Applicative bootloader proofs are aggregated across several blockchains and proven by [SHARP](https://docs.starknet.io/architecture/sharp/#what_is_sharp). The SHARP STARK proof is verified onchain without any SNARK wraps.\n\n## Trusted setup\n\nStwo is a STARK (transparent SNARK) that does not perform a wrap in a SNARK, so it does not require any trusted setup.",
      "quantumResistant": true,
      "techStack": {
        "zkVM": [
          {
            "id": "Stwo",
            "type": "STARK",
            "name": "Stwo",
            "description": "State of the art implementation of Circle STARK zkVM, created by Starkware to prove Cairo programs, including state transition of Starknet."
          },
          {
            "id": "CASM",
            "type": "ISA",
            "name": "Cairo ASM",
            "description": "Instruction language for Cairo VM developed by Starkware."
          },
          {
            "id": "Mersenne31",
            "type": "Field",
            "name": "Mersenne31",
            "description": "Prime field of order p = 2**31 - 1."
          }
        ]
      },
      "trustedSetups": [
        {
          "id": "TransparentSetup",
          "name": "Transparent setup",
          "risk": "N/A",
          "shortDescription": "No trusted setup and no additional setup-related trust assumptions.",
          "longDescription": "Transparent proving systems require no trusted setups and have no additional setup-related trust assumptions.",
          "proofSystem": {
            "id": "Stwo",
            "type": "STARK",
            "name": "Stwo",
            "description": "State of the art implementation of Circle STARK zkVM, created by Starkware to prove Cairo programs, including state transition of Starknet."
          }
        }
      ],
      "verifierHashes": [
        {
          "hash": "0xf16d320ba0d2087a99ffd465041960fd0aedf5e723c0fb877533876c531191d3",
          "name": "Stwo verifier 2025_11",
          "sourceLink": "https://etherscan.io/address/0x13e120F6c8E747983F7aaF0f7731796bfcb0D934#code",
          "proofSystem": {
            "id": "Stwo",
            "type": "STARK",
            "name": "Stwo",
            "description": "State of the art implementation of Circle STARK zkVM, created by Starkware to prove Cairo programs, including state transition of Starknet."
          },
          "knownDeployments": [
            {
              "address": "eth:0x13e120F6c8E747983F7aaF0f7731796bfcb0D934",
              "overrideUsedIn": [
                "starknet",
                "paradex"
              ]
            }
          ],
          "verificationStatus": "successful",
          "verificationSteps": "Onchain stwo verifier smart contracts contain code that directly checks proofs of correct Cairo program execution. Unlike SNARK final wraps, it does not contain any additional cryptographic components that need to be independently regenerated because it introduces no new zk circuits. The sources are verified on etherscan and can be examined directly to check the correct implementation of STARK verification protocol.",
          "description": "Custom verifier ID: SHA256 hash of the address of the immutable verifier smart contract (GpsStatementVerifier) in hex string format '0x...'."
        }
      ]
    }