Garg et al. proposed the BABE protocol in their paper, combining witness encryption and efficient garbled circuits to reduce off-chain proof verification costs on Bitcoin by three orders of magnitude while maintaining low on-chain costs. Garg等人在论文中提出BABE协议,通过结合见证加密和高效混淆电路,将比特币上的证明验证链下成本降低三个数量级,同时保持链上低成本。
Notes
Bitcoin's limited scripting language and small block space make proof verification challenging
BitVM2 has high on-chain fees (>$14k in unhappy path), BitVM3 reduces on-chain costs but off-chain storage/setup is huge (42GB garbled circuits)
BABE uses witness encryption for linear pairings to verify Groth16 proofs, combined with efficient garbled circuits for secure two-party computation
Design builds on Argo MAC for efficient garbling of homomorphic MACs on elliptic curves
Protocol reduces off-chain costs by three orders of magnitude while maintaining BitVM3's on-chain savings
Applications include scaling Bitcoin and enabling trustless use of Bitcoin assets in other blockchains