zkDaily - 2026-04-14

零知识证明 zkDaily

ZKP Frontier Tracker 🎯

Tue

04.14

2026

2G2T: Constant-Size, Statistically Sound MSM Outsourcing

Paper

https://eprint.iacr.org/2026/695

Majid Khabbazian MSM Outsourcing

Majid Khabbazian proposed the 2G2T protocol in the paper for outsourcing MSM to untrusted servers, featuring constant-size proofs and statistical soundness, with verification up to ~300x faster than local computation.

Notes

2G2T enables resource-constrained clients to outsource MSM to untrusted servers for efficiency
Server performs only two MSM computations and returns two group elements (constant-size proof)
Client verification requires one length-n field inner product and three group operations, fast verification
In Ristretto255 implementation, verification is ~300x faster than local optimized MSM (n≤2^18)
Supports latency-hiding verification: most verifier work done while waiting for server response
Achieves statistical soundness: probability of accepting incorrect result ≤1/q, high security

Collected by @icerdesign

零知识证明 zkDaily

Q&A Deep Dive 💬

Tue

04.14

2026

Why is MSM important?

MSM is a core computation in many discrete-log cryptographic systems and ZK proof verifiers, often becoming a major bottleneck, especially for lightweight clients.

What is the communication cost of 2G2T?

The server only returns two group elements: the result A and an auxiliary value B, so the proof size is constant and independent of vector length n.

What is statistical soundness?

Even against an unbounded malicious server, the probability of accepting an incorrect result is at most 1/q, giving information-theoretic security.

Prompted by @icerdesign