<\/p>\n
The KZG Ceremony represented the largest multi-party computation of its nature (in terms of participant count). Through an open and inclusive approach, it established a secure cryptographic base for EIP-4844<\/a>.<\/p>\n <\/p>\n Discover more about how the Ceremony was conducted in Carl Beekhuizen’s Devcon presentation<\/a>: “Summoning the spirit of the Dankshard”<\/p>\n <\/p>\n As the Dencun upgrade nears, this article will act as a thorough record of the achievements and individuals who brought the Ceremony to fruition in 2023.<\/p>\n <\/p>\n <\/p>\n The Ceremony lasted for 208 days<\/strong>: commencing on Jan 13 13:13 UTC 2023<\/a> and concluding on Aug 08 23:08 UTC 2023<\/a><\/p>\n <\/p>\n 141,416 contributions<\/strong> made this the most significant setup of its kind at the time of publication.<\/p>\n <\/p>\n \n <\/p>\n Participants were required to log in through Github or verify using an Ethereum address to mitigate spam.<\/p>\n <\/p>\n <\/p>\n For extra spam deterrence, Ethereum addresses needed to have conducted a specific number of transactions (also known as “nonce”) prior to the commencement of the Ceremony at block 16,394,155 2023\/01\/13 00:00 UTC. This stipulation was adjusted periodically, according to the requirements at those times.<\/p>\n <\/p>\n <\/p>\n To guard against bots or scripts disrupting sincere contributors, the system was structured to blacklist any accounts with excessive logins\/pings. To reset honest accounts mistakenly placed on the list, the blacklist was removed four times<\/a> during the contribution period.<\/p>\n <\/p>\n Please be aware that we do not advise utilizing KZG contributions as a dependable list of unique identities<\/strong> for instance, for airdrops. Although the sign-in and nonce prerequisites promoted honest entropy contributions, these ultimately posed minor barriers to actors wishing to contribute multiple times. Evaluations of the transcript and on-chain activity clearly indicate that numerous contributions originated from linked addresses operated by single entities. Fortunately, as these contributions continued to add entropy, it does not affect the reliability of the final transcript output.<\/p>\n <\/p>\n <\/p>\n 8ed1c73857e77ae98ea23e36cdcf828ccbf32b423fddc7480de658f9d116c848<\/strong>: is the sha-256 hash of the final transcript output.<\/p>\n <\/p>\n The transcript is 242 MB<\/strong>, and can be accessed on GitHub in the ethereum\/kzg-ceremony repository<\/a> or via IPFS<\/a> under the CID QmZ5zgyg1i7ixhDjbUM2fmVpES1s9NQfYBM2twgrTSahdy<\/span>.<\/p>\n <\/p>\n There are various methods for validating the transcript. It can be examined and confirmed on ceremony.ethereum.org<\/a>, or with a specific verification script<\/a> written in rust.<\/p>\n <\/p>\n Learn more about the checks implemented here in Geoff’s blog entry: Validating the KZG Ceremony Transcript<\/a>.<\/p>\n <\/p>\n There was a commemorative POAP NFT<\/a> that contributors who logged in with their Ethereum address could claim. The design of the POAP aligns with that of the original hosted interface, featuring the hash of the transcript in the border (8ed…848). To date, over 76k NFTs have been claimed by participants. Anyone who verified the transcript output was also able to tweet as social proof of their success: see recent verification tweets here<\/a>.<\/p>\n <\/p>\n As mentioned earlier, we do not endorse using the list of minted POAPs as a solid anti-sybil indicator<\/strong>, for example, for airdrop eligibility.<\/p>\n <\/p>\n <\/p>\n From April 1-16 2023, it was the Special Contribution Period for the KZG Ceremony, allowing participants to contribute in ways that may not have been feasible during the Open Contribution phase.<\/p>\n <\/p>\n While the Ceremony only requires one honest participant to achieve a secure output, Special Contributions offer extra assurances beyond a standard entropy contribution:<\/p>\n <\/p>\n <\/p>\n Refer to the original Ethereum blog post<\/a> that catalogs the 14 special contributions: specifics on methodology, locations within the transcript, and references to supportive media.<\/p>\n <\/p>\n The resources here provide valuable information to gain further insights into how these constructs function, both broadly and in relation to Ethereum’s specific framework.<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n Given the highest significance of security within this initiative, two examinations were undertaken, each focusing on distinct components.<\/p>\n <\/p>\n There existed multiple independent implementations that Ceremony participants could execute locally, featuring a diverse array of functionalities.<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n An enormous round of applause for the numerous individuals from the larger Ethereum community who engaged in design, coordination, audits, devops, and coding. This initiative would not have been possible without your contributions!<\/p>\n <\/p>\n Additional gratitude is owed to the countless individuals who dedicated their time to contributing, reporting issues, and assisting in the growth of Ethereum.<\/p>\n<\/div>\nResults and Approaches<\/h2>\n
\n
\n
Validating the transcript<\/h3>\n
Special Contributions<\/h2>\n
\n
\n
\n<\/p>\n\n\n
\n \nTitle<\/th>\n Venue<\/th>\n Participants<\/th>\n Release Date<\/th>\n<\/tr>\n<\/thead>\n \n Danksharding and the KZG Ceremony w\/ Carl Beekhuizen (Ethereum Foundation)<\/a><\/td>\n Strange Water Podcast<\/td>\n Rex, Carl Beekhuizen<\/td>\n November 2023<\/td>\n<\/tr>\n \n KZG Ceremony Duo Summons The Ethereum Road Map<\/a><\/td>\n The Defiant<\/td>\n Tegan Kline, Carl Beekhuizen, Trent Van Epps<\/td>\n April 2023<\/td>\n<\/tr>\n \n Episode 262: Ethereum\u2019s KZG Ceremony with Trent & Carl<\/a><\/td>\n Zero Knowledge<\/td>\n Anna Rose, Kobi Gurkan, Carl Beekhuizen, Trent Van Epps<\/td>\n Feb 2023<\/td>\n<\/tr>\n \n Ethereum’s KZG Ceremony<\/a><\/td>\n Bankless<\/td>\n David Hoffman, Trent Van Epps, Carl Beekhuizen<\/td>\n Jan 2023<\/td>\n<\/tr>\n \n Peep an EIP – KZG Ceremony<\/a><\/td>\n EthCatHerders<\/td>\n Pooja Ranjan, Carl Beekhuizen<\/td>\n Jan 2023<\/td>\n<\/tr>\n \n Ethereum Foundation \u2013 EIP-4844 & KZG Ceremony<\/a><\/td>\n Epicenter<\/td>\n Friederike Ernst, Trent Van Epps, Carl Beekhuizen<\/td>\n Jan 2023<\/td>\n<\/tr>\n \n Building the KZG Ceremony<\/a><\/td>\n PSE Learn and Share<\/td>\n Nico Serrano, Geoff Lamperd<\/td>\n Dec 2022<\/td>\n<\/tr>\n \n The KZG Ceremony – or How I Learnt to Stop Worrying and Love Trusted Setups<\/a><\/td>\n Devcon<\/td>\n Carl Beekhuizen<\/td>\n Oct 2022<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n Audits<\/h2>\n
\n<\/p>\nClient Implementations<\/h2>\n
CLI Interfaces<\/h3>\n
\n\n
\n \nImplementation<\/th>\n BLS Library<\/th>\n Language<\/th>\n License<\/th>\n Author<\/th>\n Notes<\/th>\n<\/tr>\n<\/thead>\n \n Chotto<\/a><\/td>\n blst (jblst<\/a>)<\/td>\n Java<\/td>\n Apache 2.0<\/td>\n Stefan Bratanov (@StefanBratanov)<\/td>\n <\/tr>\n \n go-kzg-ceremony-client<\/a><\/td>\n gnark-crypto<\/td>\n Go<\/td>\n MIT<\/td>\n Ignacio Hagopian (@jsign)<\/td>\n Features include: transcript verification, usage of supplementary external entropy sources, such as drand network or a custom URL provided by the user. Caution: double signing is not feasible due to the absence of hash-to-curve in gnark.<\/td>\n<\/tr>\n \n eth-KZG-ceremony-alt<\/a><\/td>\n kilic<\/td>\n Go<\/td>\n GPL-3.0<\/td>\n Arnaucube (@arnaucube)<\/td>\n <\/tr>\n \n Towers of Pau<\/a><\/td>\n blst<\/td>\n Go<\/td>\n MIT<\/td>\n Daniel Knopik (@dknopik), Marius van der Wijden (@MariusVanDerWijden)<\/td>\n Linux exclusive, no signatures.<\/td>\n<\/tr>\n \n cpp-kzg-ceremony-client<\/a><\/td>\n blst<\/td>\n C++<\/td>\n AGPL-3.0<\/td>\n Patrice Vignola (@PatriceVignola)<\/td>\n Features encompass: BLS\/ECDSA signing, transcript verification, compatibility with Linux\/Windows\/MacOS<\/td>\n<\/tr>\n \n czg-keremony<\/a><\/td>\n noble-curves<\/td>\n JavaScript<\/td>\n MIT<\/td>\n JoonKyo Kim (@rootwarp), HyungGi Kim (@kim201212)<\/td>\n <\/tr>\n \n kzg-ceremony-client<\/a><\/td>\n blst<\/td>\n C#<\/td>\n MIT<\/td>\n Alexey (@flcl42), CheeChyuan (@chee-chyuan), Michal (@mpzajac), Jorge (@jmederosalvarado), Prince (@prix0007)<\/td>\n <\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n Browser Interfaces<\/h3>\n
\n<\/p>\n\n
BLS Libraries<\/h3>\n
\n<\/p>\n
\n<\/p>\n