[Crypto-panel] Re: Request for review: Verifiable Distributed Aggregation Functions

[Julia Hesse <[e-mail]>]

Hi Chris,

I've started reviewing all the materials, I think I got the high level 
already, looking into the details now. But thanks for offering. I would 
still take a look at that deck if you send it to me.

One question though: how much sense does it make to still review the 
Poplar1 part? I saw some thread on plans on removing it when this other 
draft (Matris? I forgot the exact name...) becomes available. I am just 
asking because it would be an option for me to spend all the allocated 
time on Prio and do a more thorough review of that.

Best,
Julia



Am 03.02.2025 um 16:19 schrieb Christopher Patton:
> Excellent, thanks Julia! If helpful/appropriate, I'd be happy to 
> explain the high level concepts in a call. I have a deck for a talk 
> I've given a few times that I think would be helpful.
>
> Chris P.
>
> On Mon, Feb 3, 2025 at 7:07 AM Stanislav V. Smyshlyaev 
> <[e-mail]> wrote:
>
>     Dear Chris,
>
>     FYI: Julia Hesse will review the draft on behalf of the Crypto Panel.
>
>     Regards,
>     Stanislav (for chairs)
>
>     On Mon, Feb 3, 2025 at 6:00 PM Christopher Patton
>     <[e-mail]> wrote:
>
>         Hi all, I just wanted to give folks a heads up on the
>         literature relevant to this draft. A "VDAF" is a type of
>         lightweight, multi-party computation for sucrely aggregating
>         data. The draft describes two concrete VDAFs:
>
>         - Prio3: based on a paper called "Prio"
>         (https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/corrigan-gibbs)
>         The main difference between the paper and the protocol in the
>         draft is that we use a more efficient proof system from a
>         later paper (https://eprint.iacr.org/2019/188) An end-to-end
>         analysis of Prio3 can be found in
>         https://eprint.iacr.org/2023/130.
>         - Poplar1: based on a paper called "Poplar"
>         (https://eprint.iacr.org/2021/017) There are no significant
>         changes from the paper apart from how we instantiated the hash
>         functions, which is not fully specified in the paper.
>
>         On behalf of the draft authors, we really appreciate your time
>         on this.
>
>         Best,
>         Chris P.
>
>         On Thu, Jan 23, 2025 at 10:22 PM Stanislav V. Smyshlyaev
>         <[e-mail]> wrote:
>
>             Julia, Chloe, would one of you (or maybe both) be happy to
>             take this one?
>
>             Regards,
>             Stanislav (for chairs)
>
>             On Thu, Jan 16, 2025 at 5:41 PM Stanislav V. Smyshlyaev
>             <[e-mail]> wrote:
>
>                 Dear Crypto Panel experts,
>
>                 The chairs would also like to ask the Crypto Panel to
>                 provide a review for the current version (-14) of the
>                 "Verifiable Distributed Aggregation Functions" draft,
>                 draft-irtf-cfrg-vdaf-14
>                 (https://www.ietf.org/archive/id/draft-irtf-cfrg-vdaf-14.html)
>
>                 Volunteers?
>
>                 Stanislav (on behalf of the CFRG Chairs)
>