Bringing ZK to Google Wallet with Abhi and Matteo

In this episode, Anna and Nico speak with Abhi Shelat and Matteo Frigo from Google about their work integrating zero-knowledge proofs into the Google Wallet. They discuss the technical decisions behind the Anonymous Credentials for ECDSA system, including the challenge of designing a proof system where proving must be efficient enough to run on the client device in a large-scale consumer application, and how they design a system using sumcheck and Ligero to overcome NTT issues. The conversation also touches on the process of standardization, the return of ZK to its privacy roots, and the broader significance of seeing advanced cryptography adopted by a major tech company outside the blockchain space. Links:

• Episode 303: A Dive into Binius with Jim Posen
• Anonymous credentials from ECDSA
• libZK: a zero-knowledge proof library
• European Digital Identity
• FFTW
• Doubly-Efficient zkSNARKs Without Trusted Setup
• Ligero: Lightweight Sublinear Arguments Without a Trusted Setup
• Everything provable is provable in zero-knowledge
• Circle STARKs
• Highlights of libZK, the Google Wallet ZKP
• Parallel prefix

---------------

• Register for ZK Hack Berlin happening 20 - 22 June!

---------------

• Boundless is a universal zero-knowledge protocol developed by RISC Zero, that lets anyone access abundant verifiable compute, regardless of the blockchain they are using. Learn more about Boundless at