Ethereum Co-Founder Vitalik Buterin Says Cryptography’s Hardest Problem Is Still Unsolved

What Obfuscation Actually Does

Most radical successful crypto are acquainted with encryption, which hides information successful transit, and zero-knowledge proofs, which verify information without revealing it. Obfuscation does thing different: it hides the codification itself.

Think of it this way. Encryption locks a missive wrong an envelope. Obfuscation scrambles the instrumentality that writes the missive truthful that nary one, not adjacent idiosyncratic watching it run, tin fig retired however it works.

The circumstantial mentation Vitalik Buterin described successful his latest blog post is called indistinguishability obfuscation, oregon iO. In plain terms, iO means that if 2 programs bash the aforesaid happening but usage antithetic interior logic, you cannot archer them isolated erstwhile obfuscated. The programme runs, produces existent outputs, and reveals thing astir however it got there.

Why Blockchain Needs This

In the analysis, Buterin connected iO straight to the blockchain usage case. Obfuscated programs cannot forestall themselves from being copied, which means they cannot clasp authorities similar a equilibrium oregon a transaction record. That is precisely what blockchains do.

Combine the two, Buterin wrote, and the effect is thing adjacent to a “trustless trusted 3rd party.” A strategy that enforces rules, processes inputs, and produces honorable outputs without anyone needing to spot the radical who built it.

One factual example: a secure, private, manipulation-resistant voting strategy with nary multisig committee, nary trusted setup tally by a tiny group, and nary presumption that astatine slightest immoderate participants enactment honest.

The Progress So Far

Researchers person spent astir 20 years trying to physique a provably unafraid mentation of iO. Early approaches were breached repeatedly. Buterin referenced a cardinal effect from 2001 showing that the perfect mentation of obfuscation is mathematically impossible. Researchers past shifted to iO arsenic the next-best target.

In caller years, the tract reached a milestone. Cryptographers present person constructions that execute iO nether what Buterin called “reasonable information assumptions.” That is genuine progress.

The Problem: Runtimes Longer Than the Universe

The drawback is runtime. Current iO schemes are technically polynomial, meaning they standard with input size alternatively than exploding exponentially. But Buterin described the existent overhead arsenic “galactic.”

The schemes enactment by stacking respective layers of precocious cryptographic tools wrong each other. Each furniture wraps the 1 beneath it. The effect is simply a strategy wherever processing a azygous input tin necessitate overhead factors estimated supra 10 to the 10th power, with information requirements that propulsion ciphertext sizes thousands of times larger than modular constructions.

Buterin’s estimate: expected runtimes connected existent schemes transcend the property of the universe.

3 Ways Forward

Buterin outlined 3 paths researchers are pursuing:

• Optimize the existing operation of constructions utilizing smarter engineering and AI assistance to shave orders of magnitude disconnected each bottleneck, akin to however SNARK show improved dramatically aft 2010.
• Build iO utilizing much assertive but simpler cryptographic assumptions, trading immoderate theoretical rigor for applicable speed.
• Discover an wholly caller attack to obfuscation, perchance extracurricular the lattice-based mathematics that underpins astir of today’s work.

What It Means for Crypto

Buterin framed the stakes plainly. If immoderate of those paths succeed, the effect is simply a mentation of cryptography wherever immoderate protocol that tin beryllium described with a trusted 3rd enactment tin beryllium built without one. That covers backstage smart contracts, anonymous credential systems, encrypted computation connected delicate data, and governance systems that cannot beryllium gamed by insiders.

“If we win successful either path, the reward is high: determination is simply a existent consciousness successful which we volition person ‘solved cryptography’: immoderate protocol that tin beryllium described utilizing an idealized trusted 3rd party, provided the adversary is allowed to rewind the clock, volition beryllium implementable securely. But getting determination is inactive a formidable challenge,” Buterin concluded.

The exertion is not ready. But the roadmap, Buterin wrote, is clearer than it has ever been.