[Crypto-panel] Re: Request for review: Verifiable Distributed Aggregation Functions

[Christopher Patton <[e-mail]>]

Excellent, thanks Julia! If helpful/appropriate, I'd be happy to explain
the high level concepts in a call. I have a deck for a talk I've given a
few times that I think would be helpful.

Chris P.

On Mon, Feb 3, 2025 at 7:07 AM Stanislav V. Smyshlyaev <[e-mail]>
wrote:

> Dear Chris,
>
> FYI: Julia Hesse will review the draft on behalf of the Crypto Panel.
>
> Regards,
> Stanislav (for chairs)
>
> On Mon, Feb 3, 2025 at 6:00 PM Christopher Patton <[e-mail]>
> wrote:
>
>> Hi all, I just wanted to give folks a heads up on the literature relevant
>> to this draft. A "VDAF" is a type of lightweight, multi-party computation
>> for sucrely aggregating data. The draft describes two concrete VDAFs:
>>
>> - Prio3: based on a paper called "Prio" (
>> https://www.usenix.org/conference/nsdi17/technical-sessions/presentation/corrigan-gibbs)
>> The main difference between the paper and the protocol in the draft is that
>> we use a more efficient proof system from a later paper (
>> https://eprint.iacr.org/2019/188) An end-to-end analysis of Prio3 can
>> be found in https://eprint.iacr.org/2023/130.
>> - Poplar1: based on a paper called "Poplar" (
>> https://eprint.iacr.org/2021/017) There are no significant changes from
>> the paper apart from how we instantiated the hash functions, which is not
>> fully specified in the paper.
>>
>> On behalf of the draft authors, we really appreciate your time on this.
>>
>> Best,
>> Chris P.
>>
>> On Thu, Jan 23, 2025 at 10:22 PM Stanislav V. Smyshlyaev <
>> [e-mail]> wrote:
>>
>>> Julia, Chloe, would one of you (or maybe both) be happy to take this one?
>>>
>>> Regards,
>>> Stanislav (for chairs)
>>>
>>> On Thu, Jan 16, 2025 at 5:41 PM Stanislav V. Smyshlyaev <
>>> [e-mail]> wrote:
>>>
>>>> Dear Crypto Panel experts,
>>>>
>>>> The chairs would also like to ask the Crypto Panel to provide
>>>> a review for the current version (-14) of the "Verifiable Distributed
>>>> Aggregation Functions" draft, draft-irtf-cfrg-vdaf-14 (
>>>> https://www.ietf.org/archive/id/draft-irtf-cfrg-vdaf-14.html)
>>>>
>>>> Volunteers?
>>>>
>>>> Stanislav (on behalf of the CFRG Chairs)
>>>>
>>>