The KZG Ceremony was the largest multi-party computation of its benignant (by fig of participants). Through an open, accessible process, it produced a unafraid cryptographic instauration for EIP-4844.
Learn much astir however the Ceremony worked successful Carl Beekhuizen's Devcon talk: "Summoning the tone of the Dankshard"
As the Dencun upgrade approaches, this station volition service arsenic a broad grounds of outcomes and radical that brought the Ceremony to beingness successful 2023.
Outcomes and Methods
The Ceremony ran for 208 days: from Jan 13 13:13 UTC 2023 until Aug 08 23:08 UTC 2023
141,416 contributions made this the largest setup of this benignant astatine the clip of publishing.
Contributors were required to sign-in via Github oregon authenticate utilizing an Ethereum code for spam prevention.
- 132,021 (93.36%) utilized Sign successful with Ethereum
- 9,395 (6.64%) utilized Github
As further spam prevention, Ethereum addresses were required to person sent a definite fig of transactions (also referred to arsenic "nonce") earlier the commencement of the Ceremony astatine artifact 16,394,155 2023/01/13 00:00 UTC. This request was modified throughout, depending connected the needs astatine that time.
- Jan 13 - March 13: nonce 3
- March 13 - April 01: nary caller logins, but the lobby was allowed to wide out, ie. anyone already logged-in was capable to implicit their contribution.
- April 01-16: nationalist contributions closed to accommodate Special Contributions
- April 16-25: 128
- April 25-May 8: 64
- May 8-25: 32
- May 25 - June 27: 16
- June 27 - Aug 23: 8
To forestall bots oregon scripts from interrupting honorable contributors, the process was acceptable up to blacklist immoderate accounts with excessive logins/pings. To reset honorable accounts accidentally added to the list, the blacklist was cleared four times passim the publication period.
Verifying the transcript
8ed1c73857e77ae98ea23e36cdcf828ccbf32b423fddc7480de658f9d116c848: is the sha-256 hash of the last transcript output.
The transcript is disposable connected GitHub successful the ethereum/kzg-ceremony repo oregon via IPFS nether the CID QmZ5zgyg1i7ixhDjbUM2fmVpES1s9NQfYBM2twgrTSahdy.
There are respective means of verifying the transcript. It tin beryllium explored and verified connected ceremony.ethereum.org, oregon with a dedicated verification script written successful rust.
Learn much astir the checks implemented present successful Geoff's blog post: Verifying the KZG Ceremony Transcript.
There was a commemorative POAP NFT which could beryllium claimed by contributors who logged successful with their Ethereum address. The plan of the POAP matches that of the archetypal hosted interface, and includes the hash of the transcript successful the borderline (8ed...848). To date, implicit 76k NFTs person been claimed by participants. Anyone who verified the transcript output was besides capable to tweet arsenic societal impervious of success: spot caller verification tweets here.
Special Contributions
April 1-16 2023 was the Special Contribution Period for the KZG Ceremony. This allowed participants to lend successful ways that whitethorn not person been imaginable successful the Open Contribution period.
While the Ceremony lone needs a azygous honorable subordinate to supply a unafraid output, Special Contributions supply further assurances beyond a modular entropy contribution:
- computing implicit the entropy successful an isolated situation (eg. connected an air-gapped machine, wiping and physically destroying hardware) means it's improbable for a malicious entity to person extracted the entropy astatine immoderate point
- detailed documentation (explore links below) attached to existent reputations are improbable to each person been coopted oregon faked by a malicious coordinating entity. The records are disposable for aboriginal observers to explore.
- different hardware and bundle limits correlated risk
- differentiated entropy procreation (eg. measuring an explosion) prevents the Ceremony output being compromised by immoderate nonaccomplishment successful the regular entropy procreation (eg. the hosted interface)
- contributions involving ample groups of radical are harder to fake than those with lone 1 person
See the archetypal Ethereum blog post which documents the 14 peculiar contributions: details connected methodology, wherever to find them successful the transcript, and links to documenting media.
- Cryptosat: entropy from space
- The KZG Marble Machine: 3d printed marble machine
- Mr. Moloch’s Ephemeral Album II: a day-long philharmonic adventure
- Dog Dinner Dance Dynamics: a bully lad get dinner
- CZG-Keremony: a axenic JS KZG ceremonial client
- Improvised Theatre: unpredictable improv
- A Calculating Car: Self-driving car collects data
- A noisy city: Sydney whispers its stories
- Exothermic Entropy: chemicals spell boom
- The Sferic Project: lightning ne'er strikes successful the aforesaid spot twice
- The Great Belgian Beer Entropy Caper: signaling a nighttime of brew with a friend
- KZGamer: summoning Dankshard with a dice-tower
- Catropy: cats proceed being integral to the internet
- srsly: an iOS KZG Ceremony client
The resources present are adjuvant to larn much astir however these constructions work, some mostly and with respect to Ethereum's peculiar context.
- KZG Ceremony FAQ
- How bash trusted setups work?
- EIP-4844
- Proto-Danksharding FAQ
- KZG polynomial commitments
- KZG Ceremony Timeline
- Spec Repo
- Frontend Repo
- Learnings from the KZG Ceremony (Nico's blog post)
Danksharding and the KZG Ceremony w/ Carl Beekhuizen (Ethereum Foundation) | Strange Water Podcast | Rex, Carl Beekhuizen | November 2023 |
KZG Ceremony Duo Summons The Ethereum Road Map | The Defiant | Tegan Kline, Carl Beekhuizen, Trent Van Epps | April 2023 |
Episode 262: Ethereum’s KZG Ceremony with Trent & Carl | Zero Knowledge | Anna Rose, Kobi Gurkan, Carl Beekhuizen, Trent Van Epps | Feb 2023 |
Ethereum's KZG Ceremony | Bankless | David Hoffman, Trent Van Epps, Carl Beekhuizen | Jan 2023 |
Peep an EIP - KZG Ceremony | EthCatHerders | Pooja Ranjan, Carl Beekhuizen | Jan 2023 |
Ethereum Foundation – EIP-4844 & KZG Ceremony | Epicenter | Friederike Ernst, Trent Van Epps, Carl Beekhuizen | Jan 2023 |
Building the KZG Ceremony | PSE Learn and Share | Nico Serrano, Geoff Lamperd | Dec 2022 |
The KZG Ceremony - oregon How I Learnt to Stop Worrying and Love Trusted Setups | Devcon | Carl Beekhuizen | Oct 2022 |
Audits
Given the utmost value of information successful this project, 2 audits were conducted, each for antithetic components.
- SECBIT Spec + Implementation Audit - Aug 2022
- Sigma Prime Sequencer Audit - Jan 2023
Client Implementations
There were a fig of autarkic implementations that Ceremony participants could tally locally, with a assortment of antithetic features.
CLI Interfaces
Chotto | blst (jblst) | Java | Apache 2.0 | Stefan Bratanov (@StefanBratanov) | |
go-kzg-ceremony-client | gnark-crypto | Go | MIT | Ignacio Hagopian (@jsign) | Features: transcript verification, utilizing further outer sources of entropy, eg. drand network, an arbitrary URL provided by the user. Note: treble signing not supported owed to deficiency of hash-to-curve successful gnark. |
eth-KZG-ceremony-alt | kilic | Go | GPL-3.0 | Arnaucube (@arnaucube) | |
Towers of Pau | blst | Go | MIT | Daniel Knopik (@dknopik), Marius van der Wijden (@MariusVanDerWijden) | Linux only, nary signatures. |
cpp-kzg-ceremony-client | blst | C++ | AGPL-3.0 | Patrice Vignola (@PatriceVignola) | Features: BLS/ECDSA signing, transcript verification, Linux/Windows/MacOS support |
czg-keremony | noble-curves | JavaScript | MIT | JoonKyo Kim (@rootwarp), HyungGi Kim (@kim201212) | |
kzg-ceremony-client | blst | C# | MIT | Alexey (@flcl42), CheeChyuan (@chee-chyuan), Michal (@mpzajac), Jorge (@jmederosalvarado), Prince (@prix0007) |
Browser Interfaces
- audit: QmevfvaP3nR5iMncWKa55B2f5mUgTAw9oDjFovD3XNrJTV
- doge: QmRs83zAU1hEnPHeeSKBUa58kLiWiwkjG3rJCmB8ViTcSU
BLS Libraries
A monolithic outcry retired to the dozens of radical from the broader Ethereum assemblage progressive successful design, coordination, audits, devops-ing, and penning code. This task would not person existed without your efforts!
Another convey you to the tens of thousands of radical who took the clip to contribute, study bugs, and assistance standard Ethereum.