[00:00:05]: Anna Rose: Welcome to Zero Knowledge. I'm your host, Anna Rose. In this podcast we will be exploring the latest in zero-knowledge research and the decentralized web, as well as new paradigms that promise to change the way we interact and transact online. So today we are here for a special little episode. I'm still on break, but I wanted to return for an end-of-year 2024 lookback, and a looking forward episode. I'm here with most of my co-hosts, Tarun, Guillermo and Nico are here with me. Hey guys. [00:00:47]: Guillermo: Yay. [00:00:48] : Nico: Hello. [00:00:48]: Tarun: Yoh. [00:00:49] : Guillermo: What's up? [00:00:50]: Anna Rose: We are only missing Kobi. I think we've actually done this almost every year. Sometimes we've broken this down into two episodes, doing like a lookback episode and then a look-forward episode. This time we're going to try to combine the two of them. We're going to try to focus less on like a month by month, play-by-play, which we did do once, and a little bit more on like general themes. What went well, what didn't go as well, and what could be coming in the future. So I put together a few little -- actually, ChatGPT helped me put together a few little questions about the past. [00:01:23]: Tarun: What went well? Anna using AI in 2024. [00:01:26]: Guillermo: Yeah, exactly. Who would have thought that's really a change? [00:01:31]: Anna Rose: Well, we used it in 2023 when we modded my voice [00:01:33]: Tarun: It was more -- you were more -- [00:01:34]: Anna Rose: That one time. [00:01:34]: Traun: You were less gave in -- you didn't give in to the Borg then. You were freaked out by the Borg. [00:01:39]: Anna Rose: True. I was scared. [00:01:41]: Guillermo: AI God was not sparking joy, but apparently it sparked enough joy that you actually used it like not ironically this time, which is impressive. [00:01:49]: Anna Rose: Yeah. Okay. So here's the first generic ChatGPT question that I was able to get. What were the most significant advances in ZK in 2024? I know that's a bit generic, but we're starting around there. So I wanted to start with research actually. What did happen this year? What are -- kind of like in 2024, what are pieces of work, research papers like implementations that stand out to you, but more on this like research-y cryptography side. [00:02:17]: Nico: There was a lot of movement in like hash-based SNARKs and a lot of new developments. So we had the whole Circle STARK saga. [00:02:26]: Guillermo: Oh wait, that was this year, shit! It feels like a year, like more than a year ago. That's crazy. [00:02:30]: Anna Rose: Are you sure that wasn't end of 2023? Because I'm pretty sure I had Ulrich on. [00:02:33]: Nico: So I checked before. [00:02:35]: Anna Rose: Oh, you did? Okay. [00:02:37]: Nico: Yeah, yeah. They did their first investigation into M31 in 2023 and we had these like Reed-Solomon codes over M31. And then in 2024 they had the full fledged like Circle STARK and the Stwo implementation come out. You also have like STIR / WHIR are things that came out in 2024. [00:02:55]: Anna Rose: Yeah. [00:02:57]: Nico: More recently there was Blaze. So there's a lot of work in this area of research. [00:03:01]: Guillermo: And that's good. [00:03:02]: Nico: And that is good. Yeah. Well actually it's also sparked a whole other narrative this year which was the hash versus curved and like hash-based SNARKs or curve-based SNARKs. And it's nice to have like hash has won. [00:03:14]: Anna Rose: Wow. [00:03:15]: Nico: And I think that's interesting to look at, revisit chat about, I don't know. [00:03:18]: Anna Rose: Yeah. [00:03:18]: Guillermo: I remember -- I mean, we had an episode, I believe with David Wong where he had a hot spicy prediction that he was like hash-based SNARKs are dead. And I was like, are you sure about that? [00:03:29]: Anna Rose: Complete contrarian take. [00:03:30]: Tarun: Yeah. He should have waited till the end of the year for that one. [00:03:33]: Guillermo: Yeah. I mean, no. I think it was a great prediction because it was kind of fun to get into the weeds of it. Why the thoughts were -- but it's funny because it's like, these are not like things that are exclusive, right? Like they're not -- like you don't just get to like work on one and to the detriment of the other or something. They're kind of like just different things. So it's funny seeing some wars around them. Anyways, this is just -- [00:03:52]: Nico: Yeah. And they coexist all the time. Like every single rollup we see on Ethereum rolls their proofs into a Groth16 or like a Plonk proof. [00:04:00]: Guillermo: Right. [00:04:01]: Nico: So they do coexist and they're almost like they need to coexist. [00:04:05]: Guillermo: And it seems like it got pretty spicy at the end here. Right? With the Google announcement. I don't know. Tarun actually probably has some context on that, more context than I do. [00:04:14]: Anna Rose: Yeah. [00:04:14]: Guillermo: Actually paid attention to the thing but -- [00:04:16]: Tarun: Well, I just thought the marketing in the blog post was a little bit incendiary. So I feel like that already turned me off to how accurate the result was because the paper is like a four-page PRL paper, and it's like doesn't really say that much, or at least the original paper. I mean, the nature paper is also a little bit marketing. So it's like I'm sure there's something there. I'm sure that Google is slightly exaggerating and like the multiverse thing in that blog post was embarrassing. Also citing David Deutsch for that, are you fucking kidding me? You're not setting like Heisenberg or Dirac or someone who came up with this shit actually, and not a guy who wrote a pop sci book. Like the entire thing is like pandering to Twitter Huberman Bros, like that article. Anyway, sorry, that was -- [00:05:03]: Anna Rose: I actually, I want to revisit this because one of the questions I'm going to be asking is a little bit more about what went wrong or setbacks or challenges. And I think I've been meaning to kind of dig into what is real and what is not real, and I'd love to do it there. Just bringing it back though to the research of 2024, I actually just dug it up. On my ZK Summit 12 slides, I did this like history of ZK research like in the intro. And for 2024, this is what we actually had. This was created in -- what is it? September, October. Maybe it changed. But we had Polymath, STARK proofs, Plonky3 came out this year. Circle STARKs, which you were right, came out this year. Garuda and Pari, which I don't actually understand, but it came out this year. And both STIR and WHIR, like you had mentioned, those were the like FRI kind of -- this is people starting to again go back into like FRI and seeing if we can improve on what was created back in 2018 - 2019. [00:06:01]: Nico: So I was actually going to add to close this hash versus curve thing. There were also developments in the curve-based land this year, including as you mentioned, Polymath, Garuda and Pari, which are all SNARKs that are smaller than Groth16. Interestingly, I'm not sure their on-chain verification cost is cheaper, but the proof itself is smaller. And I don't know, that's a cool development in itself. [00:06:22]: Anna Rose: Nice. Something I just realized I didn't have on here, but would maybe want to include, I did kind of another bonus episode on my time off with Dan Boneh, and he talked about some like lattice-based SNARKs. And that, I don't even know which works those are, but that maybe -- could that be something of like a 2024 highlight? [00:06:42]: Nico: Yeah. The big one that came out in 2024 was LatticeFold, which is sort of applying the ideas of Hypernova and using lattice-based commitment schemes. And so Dan goes into a bit more detail about how it works in that episode with you. [00:06:56]: Guillermo: There's been some other interesting developments on lattices which was quite cool, which is like Greyhound which essentially does this cool thing with LaBRADOR, which is from 2023 and gets -- it's pretty fast. I don't know. I remember seeing the numbers and they were kind of crazy, although I haven't looked super deeply into it. But it's like a Ligero like based scheme, except using lattices as opposed to standard hash functions, and that gives you a bunch of nice properties. Anyways, I don't know, it seems like they're starting to peek out a little bit under the surface, like these lattices and things like that. And we'll see where it goes from there. Although I do think next year, I do have a prediction on that for next year, for the lattice-based. [00:07:32]: Anna Rose: Oh cool. For the lattice-based SNARK STARKs, they -- at least in that episode, I understood that this makes SNARKs more compatible with FHE technology potentially. But like lattices are -- those are -- this is broader than just FHE. Right? Like, I'm assuming this all of a sudden opens it up to a bunch of new tech. [00:07:52]: Nico: Yeah, absolutely. [00:07:53]: Anna Rose: Does it also open it up to like, AI stuff? Like ML stuff? [00:07:56]: Guillermo: Potentially. [00:07:57]: Anna Rose: Tarun's making a face. [00:07:59]: Tarun: Yeah, yeah. I'm like, that's not really related. That's not really related. [00:08:03]: Anna Rose: VC talk. Get out of here. [00:08:08]: Tarun: No, I'm just like, that's -- I don't know. Those are very unrelated. [00:08:11]: Anna Rose: Oh, they are. Oh. [00:08:11]: Nico: I mean, the reason we're using lattices is because we're trying to find hard problems. We're trying to find things that are easy to set up for computers and hard to break. And that's how we do cryptography. And so, yeah, that's how we do FHE. That's how we do -- we can do ZK. Some people are looking to do like obfuscation. [00:08:26]: Tarun: Crucially, most post-quantum things are lattices. [00:08:29]: Anna Rose: Oh, I see. Okay, so it's that -- [00:08:30]: Tarun: Like the most best known post-quantum things. Yeah. [00:08:34]: Nico: And actually there was a fun paper that came out this year, a big scare. So in April, there was this paper called Quantum Algorithms for Lattice Problems, in which the author, Yilei Chen says, like, hey, here are algorithms that break these lattice problems, like quantum algorithms that break these problems. And for a period of one week, everyone was freaking out, because this is a very respected author, and everyone was reading through the paper, trying to find a bug, being like, holy shit, is everything broken? Do we have to give up on lattices? Especially because lattices were being used in a lot of the NIST standardization efforts for post-quantum encryption. And so nine days later, someone reaches out to Yilei Chen and he updates the paper saying, like, hey, there's actually a bug and I can't fix this. So the paper is still up for inspiration if people want to think about these problems, but lattices are not broken yet, as far as we know. [00:09:26]: Anna Rose: Yet. Ooh. Do you think they will be, though? Was that a hint that they could be? [00:09:31]: Nico: It was a close call. I think there were a few people trying to find bugs, and Yilei fixed a few of them. So it started to feel like maybe there's nothing we can do here. I don't know these things well enough to have any form of intuition. [00:09:45]: Guillermo: Yeah. What I think was really, for me, interesting, in that whole debacle, there was this magical organization that happened. I don't mean organization in the sense of an org that does stuff. Like an organization of like organization of humans that just happened. Like I don't know. Discord servers were launched and people were just like -- the Discord server was only talking about this paper. And the channels were different pages of the paper and different theorems people would discuss the -- it was super interesting to watch how people spontaneously organize themselves against major results in kind of like post-Covid. Right? I feel like these things kind of happen a little bit in weird niche-esoteric channels, but seeing it be so public. Right? Like outside of labs, like outside of just people who work at Google and no math or whatever were just spinning up these servers and be like, dude, come join. Like, we need whoever we can get to understand this stuff. If you can explain it, great. If you can't explain it, done. Like, let's just try to figure out what the hell this thing is saying, like, how to do it. And it was very fun seeing that. And it's kind of an interesting -- where's the future of research going, I think, which is what was kind of limited to Groups in Blackboard and whatever. The Stanford Physics Department feels to be like a very global thing now. And that -- I don't know, it was just very -- just as an anthropological exercise, it was very fun to see. [00:11:09]: Nico: I think it helps that it was a theoretical problem and a theoretical break. [00:11:12]: Guillermo: Sure. [00:11:13]: Nico: Like, had it been concrete, I think this would have been locked up Department of Defense, like, on it. [00:11:20]: Tarun: Well, I think there's also this philosophical issue that comes with these -- with generally quantum algorithms that I think is worth pointing out as to why it takes forever to figure out if these things are correct or not when someone posts them. Which is like, in most cryptography, whether it's algebraic or whether it's hash-based, I'm separating those very broadly. I know there's obviously overlap, but like there's sort of a sense in which there's -- they're very like strongly discrete objects. There's a certain number of objects, and there's a certain subset of those objects that are valid. And you want the number that are valid to be very small relative to the number that are invalid. The problem is quantum algorithms are in continuous time and continuous space. Like, all the operations are with some probability, you do this operation and this particular state update happens. And the thing is, you're trying to make this probabilistic statement, like after a certain number of operations with high probability, I've concentrated onto the valid states, like the things that are the private keys or whatever. The problem is, sometimes those continuous processes, they'll always have placed some probability on the right answer. But generally the hard part is showing that it's like the right amount of probability. And oftentimes how you measure that is extremely difficult in quantum algorithms. Whereas in discrete algorithms, it's like, probability is very easy. Right? It's like, I count one set of objects, I count another set of objects, and I divide them. I know it sounds very stupid to say it that way, but that is literally what you're doing in discrete land. But in continuous land, it's not quite that. And Guillermo hates continuous math. So I point this out just more as a -- he's a noted hater of probability and continuous space. [00:13:10]: Guillermo: No, I hate measure theory. I did my entire PhD in continuous land and physics. This is BS. [00:13:17]: Tarun: But a lot of the quantum algorithm stuff actually boils down to getting that type of stuff. Right? Unfortunately. [00:13:21]: Guillermo: I have thoughts about this because the state space is countable, and so we don't need measure theory. But that's different. [00:13:29]: Tarun: Maybe. Maybe. [00:13:29]: Guillermo: This is more of a philosophical qualm. [00:13:33]: Tarun: But I guess my -- the reason I bring this up is like there's two different cultures. There's the discrete land cryptography culture, and then there's the continuous space and time quantum algorithms culture. And so, like, any paper that makes some claim like this, has to use tools from both. And you need people who can validate both in order for it to work, which might take a lot longer than if you wrote something that's purely discrete or purely continuous. [00:14:02]: Anna Rose: Wow. [00:14:03]: Tarun: But that's more like a philosophy of science thing of, like, oh, like, how do you know whether a result is right or not? And like, how many people do you need to validate it? Whatever. Like, how many viewers? [00:14:14]: Guillermo: I think my version of this, which is just like standard Guillermo rant, is like, actually we just don't have good abstractions for quantum algorithms. [00:14:22]: Tarun: I feel like that's like giving up. [00:14:24]: Guillermo: No, no. I mean that in a positive sense of like, we should just make good abstractions for quantum algorithms. We just don't have them. Right? Right now it's kind of -- like, quantum algorithms is like a -- [00:14:34]: Tarun: I do feel like that's like throwing away -- that's throwing away decades of hard work people have done and saying, oh no, everything they've done is useless. Like it feels like it's not worth. [00:14:43]: Guillermo: I'm not saying it's useless. I'm just saying it's bad. Like bad aesthetics. And you know I have a ranking of esthetics. Physicists are not at the top. And in fact, they're not even close to the middle. But, happy to discuss further on that. I think cryptographers, funnily enough, are really at the bottom, actually, which is also kind of funny on this Tarun. [00:15:03]: Tarun: See again, again, the Guillermo trash talk hour has started. Right? [00:15:08]: Anna Rose: Yeah. Clearly. [00:15:09]: Tarun: You got to have a little respect for how hard people work on certain things -- [00:15:16]: Guillermo: No. And this is not to say that that's not important or interesting or anything like that. I just think it's bad aesthetics. [00:15:20]: Tarun: Not to say that your PhD and postdoc -- [00:15:23]: Anna Rose: Your life's work. [00:15:23]: Tarun: In 20 years of research aren't important, but -- [00:15:26]: Guillermo: Correct. But it's just -- it's bad aesthetics. [00:15:27]: Tarun. You're like Kanye West but for academics, you know, like when he -- [00:15:34]: Guillermo: I mean, hey, I'll take whatever you -- you know, as much as I sling insults, I hope that someone slings similar insults back. Like this is not a one way road. But unfortunately, I still think that I am right on this. You know, this opinion is correct. [00:15:48]: Anna Rose: Amazing. So now I want to move on to another topic I wanted to touch on for 2024, which is applications and ZK applications. So one of the challenges with applications is that sometimes they may have been proposed in previous years, but only really become relevant this year, or maybe only really started to be used this year. So we're going to be a little forgiving in like the exact timelines for the applications. I'm trying to understand here what's really kind of emerged in 2024. What do we consider the ZK application space today? [00:16:20]: Nico: So if we're going to be lenient on timelines, then I think we can talk about like zkTLS and I hate that naming for it, but like web attestation. [00:16:27]: Tarun: Oh my God. [00:16:27]: Anna Rose: Web Proofs. [00:16:29]: Tarun: Yeah. Wait, wait, wait, wait. Just because, like, I don't know if you've done an episode on this. [00:16:34]: Anna Rose: We did an episode on Web Proofs. [00:16:36]: Tarun: Yeah. Can we disambiguate the term? Because I feel like it's a wrong term. [00:16:41]: Anna Rose: zkTLS specifically, so I haven't -- yeah. [00:16:44]: Tarun: It's good explaining why it's wrong. [00:16:46]: Anna Rose: Okay. I don't think I've ever done a full episode just on that term, but it has been mentioned a bunch of times. [00:16:52]: Tarun: Good. [00:16:52]: Anna Rose: So yeah, what is the deal with zkTLS then? [00:16:55]: Nico: So the idea is you'd have some kind of plugin in your browser or you have a modified browser that allows you to make proofs about a TLS session. And even actually more specific than TLS, some cases it's like HTTPs. So it's like you go to your bank's website, it's secured with HTTPs. Great. Now you can make a proof that your account has a balance that's higher than some number. The difficulty here is the cryptography that's used is symmetric. You don't have this property, which is non-repudiation. You don't know for sure whether or not the messages sent between you and the bank were signed by you or by the bank. Right? And so to convince a third party that it was the bank and not myself, we need to include someone else in this sort of proving mechanism. And that's like these notaries or these proxies or these MPC nodes. So this is why I usually don't like the term zkTLS, because ZK usually refers to things that have a prover, a verifier, and the zero knowledge property. Hopefully if you're using ZK correctly. And then here we're actually talking about a protocol with a lot more parties. And so it could be a bit like disingenuous people. [00:17:57]: Anna Rose: MPC TLS. [00:18:00]: Nico: Yeah. it's a lot more like -- yeah, MPC TLS or you don't have to use MPC. You can do this with just someone that sits on the network between you and the bank. And then it's kind of like proxy TLS. And this way talking about TLS attestations is, in my opinion, a bit more generic, doesn't have the downsides and the pitfalls of calling it zkTLS, but also isn't specific about how you do it. I don't know what your thoughts are. [00:18:24]: Tarun: This is the kindest dunk I've ever heard. [00:18:27]: Nico: Yeah. [00:18:27]: Tarun: On the podcast. [00:18:29]: Nico: Hey, I'm not here to pick fights. I'm just here to decode some jargon. You know, that's what I do. [00:18:34]: Guillermo: That's where you're wrong kiddo. [00:18:39]: Anna Rose: All right. Are there any other things that have emerged this year? I do have a couple. [00:18:44]: Nico: I mean, if we're going to pick fights, zkVMs. [00:18:46]: Tarun: Actually, yeah. So this is what I'm -- this is what I'm going to say, which is, the fact that a lot of people have gone from working on applications to working on zkVMs is a sign that the search process to find applications has failed. And everyone wants to outsource it to people building stuff on their VMs. So then they end up building VMS instead of applications. [00:19:06]: Anna Rose: Well, I mean, we did learn this year that, like fundraising for applications, ZK applications has been hard. But I don't know if that's the fault of the state of the kind of application space or the fault of the funders at this time. Just because, like it's clear -- [00:19:23]: Tarun: I just mean that if a lot of people pivot to making a VM, you make a VM because you're like, so I want someone else to find the application and use my substrate as opposed to like, I have an application. Right? And so if everyone's going to a VM, that means the search process through the application space is not going very well, whereas the search process in the VM space is easier. [00:19:46]: Anna Rose: You really don't think it's just because there's more of an upside, like there's more of a business, like a case that investors like and investors are kind of pushing these teams to create zkMs instead of using somebody else's? [00:19:58]: Nico: I mean, if anything, I'd say it's harder to make money building a zkVM than it is building an application, because you're now competing with a lot of other zkVMs. Everything is open source. So it's very easy to fork one and make your own zkVM. Well, very easy. Relatively easy compared to what it was like a year ago, two years ago. And so I'm not sure there is a business case to be made there. [00:20:22]: Anna Rose: Well, it reminds me quite a lot of the L1 booms of yesteryear, or the L2s for that matter, where a team would have sort of a really novel application idea and then go shop it on the market. And sometimes the tech was missing for them to truly build the thing that they wanted to build, and then they had to build down the stack, and then they ended up building more of the infrastructure and then just focused on the infrastructure structure. But other times I do think it was just like -- I really do think sometimes it was just like, that was a more compelling business case for that team to be doing at that time than joining an ecosystem, where you definitely get like a lower tier status. Like you can't -- you know, you're not the L2, you're not the L1, you're not the overarching network ecosystem anymore. You're part of somebody else's. I mean, I think a lot of projects have had that problem in attracting app developers, which is like, you know, I feel like the apps should be valued very highly, but they're still sort of seen as a little bit like a secondary like, oh, it's part of my ecosystem. It's part of an ecosystem. [00:21:26]: Tarun: Well, actually, I would dispute that a little bit in terms of other crypto applications that are not ZK, where there's a ton of them making a lot of money. Like all these Telegram bots making 100 million a year plus. So all I have to say is like, I think if applications find a way to make money, they will do it regardless of the ecosystem. [00:21:49]: Anna Rose: True. [00:21:49]: Tarun. Which is like what these Telegram bot type of things have been kind of proving. So I think it's just more like people haven't been able to get any traction and the zkVM is like a safe fallback. Because you know what you're supposed to be building. And you know, if you have a particular vector direction of like these are the things I want to change, then you have a thing to keep moving on versus getting stuck in the like 'no one wants to use my thing.' [00:22:16]: Guillermo: Yeah. It's kind of funny, but zkVM feels like it's become a well trod path versus the applications which is kind of an open thing. And it's like, okay, cool, if we build a zkVM, we'll find maybe some applications. Someone will figure out some applications for it versus being like, okay, but -- [00:22:29]: Nico: It's funny because this all happened this year which we're saying of like building of zkVM is now an easy task. [00:22:34]: Anna Rose: Yeah, true. [00:22:35]: Nico: Happened this year. Up until like end of 2023, there was maybe just RISC Zero doing sort of RISC-V, and now we have plenty of them. [00:22:42]: Guillermo: Yeah. So when I say like easy task, I don't mean like easy in a physical sense. I mean, easy in like the spiritual sense of like this is now a thing that like is a thing, right? I know it's a kind of wooey or whatever, but it is like a thing that people now do. Right? Which is a funny thing to say about such a kind of niche, esoteric topic relative to -- not in crypto, but just in the rest of the world like, I guess, the -- [00:23:05]: Anna Rose: Don't you find that when a project -- when a category reaches that level -- like, for example, I can't remember what we said last year for 2023. I was telling you this, Guillermo. I didn't have a chance to listen to our episode, so I don't know what we said, but I'm pretty sure we would have mentioned coprocessors last year, because that was -- [00:23:24]: Guillermo: Yeah, we did. I'm pretty sure. I can even look it up. [00:23:25]: Anna Rose: The idea emerged and then within a few months, a few other teams were doing it, and then by the end of the year, there was like, a list version very, very long. And I think a lot of those teams have since sort of -- like that's their application, but they've moved a lot of their effort into like another part of the stack that they're building. [00:23:41]: Nico: Well, that's what we just saw with Axiom, right? Announcing OpenVM. So Axiom started out as a coprocessor, and now they're leading in one of these like VM efforts. [00:23:50]: Anna Rose: That's crazy. I actually didn't know this. When did this get announced? [00:23:53]: Nico: Yesterday. [00:23:54]: Anna Rose: Okay. Fair, fair. I'm allowed not to know this. I feel like I was completely out of the loop. I was like, what? Okay, Yesterday. [00:24:01]: Nico: No, no. [00:24:02]: Anna Rose: A lot of other coprocessors then ended up moving more in the prover network side of things. And prover networks we definitely talked about at the end of last year. That was when we were first seeing those projects emerge. But in the last year, we've seen a lot of teams that had sort of initially pitched themselves as one type of application, include a prover network to widen their offering, basically. [00:24:25]: Tarun: My only thing is just like, I think the answer to your question is there are no applications. [?] I love you. You know, it's like it's literally that's what 2024 was to me. [00:24:37]: Nico: I mean, there's one -- so actually, thinking back to our predictions that we made earlier this year, we were talking about identity stuff and scanning passports, and that's actually something that has been built a lot this year. [00:24:50]: Anna Rose: True. [00:24:50]: Nico: There's a lot of different teams that have been able to scan passports and make ZK proofs around them. The application built on top of it, I haven't seen many. We had heard of -- I think it was the Rarimo team using it to do shadow elections in specific countries. I think Aztec, some of their early wallets are looking to integrate this like from the very beginning in the wallet, but I don't know if we saw it yet like fully fledged identity systems and identity applications. We're on the way. [00:25:20]: Anna Rose: Nico, you and I talked a lot about this in our last -- in sort of the last episode of the regular Weekly cadence. We did a lookback at some of the events that had happened, and we mentioned the Cursive presentation at ZK Summit there. There, there's some really interesting ideas, but this is in the -- to me, that's in like ideation phase. Although they are doing experiments with all of these. So you might get a chance to use this, but it's not like it's in production yet in any sort of large scale way. [00:25:48]: Nico: Yeah. But I guess that's exactly the kind of application research that Tarun was mentioning that some others have tried and haven't been fruitful with. And hopefully, some team will find something eventually. [00:26:00]: Anna Rose: I mea, there are a few things that have popped up, but I don't know if they fall under the application category exactly, but things like this like Celestia ZK Accounts, there's all these BTC zkRollups, which is not new but it's different. I mean it's like rollups are not new but they're using -- I mean, they're going about it in a different way. And then coSNARKs, which is obviously more like an infrastructure piece. It's not an application per se, but I mean, at least in the conversations it sounded like that could open up some cool things. [00:26:31]: Tarun: I would say one thing that hopefully will come out of all the VMs, a little bit like your analogy of like the 5 million L1s, is like, A, the VM that you don't expect will win, if it's like the L1s, right, where it's like -- [00:26:45]: Anna Rose: The Solana? [00:26:45]: Tarun: Yeah, exactly. It's going to be like someone who you don't expect but who like developer -- builds better developer tooling. And then the other thing is like, I'm just hoping people kind of like upstream ZK into already successful applications versus trying to build totally new ones from scratch. Like use ZK tools as features within existing applications that already have usage. You're kind of starting to see that and my prediction is like 2025, we might actually start seeing that way more, where it's like ZK and TEEs are somehow added to already useful applications as opposed to totally built from scratch around the privacy preserving or succinctness features. I think like we're going to have a flip from like oh, the application has to be about ZK or privacy or succinctness or et cetera, and it will be like those are features that make an existing product better. And I feel like that is the direction we're moving in, but I could be very wrong. That's just my kind of rough belief. [00:27:52]: Guillermo: Yeah. On that point, I feel the same way about ZK as I do about blockchain. It's just like fundamentally, it is like a cool, insanely sick like fucking wild technology that is possible. But otherwise, like nobody's debating what database use -- like no front-facing consumer gives a shit about what database you're using in the backend of your application. Right? Like you're not like, ah, like use MongoDB. I'm not going to use you because like that. Sorry. You know, fundamentally it is like a boring technology. [00:28:20]: Anna Rose: You're against my values. Yeah, yeah. [00:28:22]: Guillermo: Yeah. It's just like a boring -- a very fundamentally boring technology for like -- it's like okay, cool. Yeah, we use this cool cryptography stuff to ensure that my privacy is preserved. Sick. And it is very cool. Like for what's worth, it's insanely cool. Like the fact that we can even do it is insane. But it is not the point. It's kind of like an instrument to doing the thing rather than the thing itself. And so to Tarun's point, I think it's a healthy thing to see where it's like cool, the tooling has become good enough that I can just incorporate this in the way I want or the way I find interesting into the app. And now I never have to think about it again, except insofar as it's like the properties I get are cool or useful or whatever. [00:29:03]: Anna Rose: I just realized Guillermo and Nico, you guys released some work recently and I don't know what category that falls under. [00:29:11]: Nico: Yeah. [00:29:12]: Anna Rose: Is that an application or is that research? [00:29:14]: Nico: I have no idea. I'm glad you asked. [00:29:16]: Guillermo: That's a great question. [00:29:17]: Anna Rose: And I do think we probably deserve a lot of -- you know, a lot of time and space to really dive into what you guys have recently released. But do you want to just quickly summarize it and then we can maybe do a full episode on it sometime soon? [00:29:31]: Guillermo: Okay. I'm going to give a quick setup, and then I'm going to say a thing. So there is this funny thing that I've been ranting on, and I believe I've done it here on the podcast, which is, right now we have multiple ways of building zero-knowledge proofs, one of which is we use a VM, a zkVM. Another one is -- I'm sorry, when I say zk, I mean zk in the royal sense of zk, you know, the lowercase zk. So succinct proofs. And I've been ranting about, like look, there are things that we use all the damn time, like literally so much that it is unbelievable that we are going to just eat all of this overhead to prove that a certain thing was done correctly. So in the case of, let's do the case of ZODA, it's like one of the things that happens a lot in Celestia is we encode some piece of data. Right? And we would like to show that that encoding is in some sense correct, or close to correct or whatever. And the first thing you say is, cool, we have this very sick and cool proving system, which is either zkVM or we have, like in general proving system where we build some circuits, and you go and press Enter, and you generate your square, which takes a second on a laptop, and then you press Enter on the zkVM or ZK proving system, let it run for many hours, and then out comes a proof that the thing you did was correct. Right? But the point is the difference in time that it takes you between doing the thing that you care about doing, which is a few seconds, and proving that that thing that you just did in a second is correct is like 1000, 10000, or 100000X. [00:31:13]: Anna Rose: More? Like more time? [00:31:15]: Guillermo: More. Yeah. More time. [00:31:16]: Anna Rose: Okay. Yeah. That's bad. [00:31:17]: Guillermo: So like proving the thing is somehow -- even though it's kind of an incidental thing, like I just want to show you that what I did was correct, now it takes thousands, ten thousands, hundreds of thousands longer than just doing the thing itself, which is kind of silly. [00:31:30]: Anna Rose: Wow. [00:31:31]: Guillermo: And, yeah, it's easier to prove -- easier to verify and stuff, but fundamentally, it's that. So one of the rants I've always had is like, okay, in some sense, there are certain -- you know, it is easier to build on a zkVM, which is why everyone's building zkVMs. So but you should be able to kind of go down to the bare metal, and for certain very important applications, we should be able to construct specific proving -- you know, I don't know what to call them, and like not a system because it doesn't prove everything, but a specific algorithm such that the amount of time you spend doing the thing and the amount of time you spend proving that the thing you've done is correct is very small. Right? [00:32:08]: Anna Rose: Cool. And that's what you guys have built? [00:32:12]: Guillermo: So specifically, yeah. In the case of DA, we've built what we think is the first purpose specific succinct proof, which actually does a thing that people are using right now, like they're doing right now in the case of data availability. Which is, we want to prove that something is not just close to a correct encoding, but indeed it has this tensor property of this weird encoding and it has these additional data availability properties or whatever. [00:32:35]: Nico: Yeah. Just to be clear, like not exactly the first, Guillermo. Right? There's these great papers from Ethereum Foundation, like Benedikt Wagner, Mark Simkin and I think, Mathias Hall-Andersen who look at this problem. But the way they do it incurs a constant overhead cost on the network. So in their system, the network is going to be sending the same thing to every single light node, whereas we sort of relaxed a bit of definitions, looked at it, maybe I'd argue a bit more holistically and realized we could get rid of that overhead. And so that's sort of the main point of the work. [00:33:10]: Anna Rose: Cool. [00:33:10]: Guillermo: Correct. Right. Yeah. So we're not the first ones to do it overall. I think we're the first and specifically is to do it in a way that's zero overhead, where constructing the proof and having done the thing takes the same amount of time, and takes the same amount of space. So which is weird and like, not obviously you can do. Anyways, that's a whole other thing for a later problem, we could talk. [00:33:28]: Anna Rose: About another episode potentially. [00:33:30]: Guillermo: Yes. [00:33:31]: Anna Rose: Very cool. So now I think we're almost at the end of the 2024 lookback. There was one point I did want to cover, which was, were there any technical barriers or challenges that the ZK space faced this year? I think 2022 was the OFAC sanctioning of Tornado. Last year, I honestly can't remember what the challenge was, but I'm sure we said something. Earlier in this episode, we actually brought one up that was at least suggested right here at the end of the year, which is quantum computing will ruin elliptic curve cryptography. And I have to be honest, like I slightly fell for it. I thought like, ooh, maybe this is a thing. [00:34:14]: Nico: I mean, we know it's going to happen, right? It's just a matter of timeline. [00:34:18]: Anna Rose: It's when? [00:34:19]: Nico: And yeah, I think we still have a lot of time. [00:34:21]: Tarun: One thing that oftentimes happens, I think in research where you have to build physical devices, is if it's not really a general purpose device, it's built around solving a particular problem really fast. But it might not be particularly fast for other problems. Like maybe the only problems it can encode are things that are represented as an Ising model. Well, a lot of computations, if I have to embed them as an Ising model, it's extremely slow, gigantic, high overhead, et cetera. Right? So my point is like there's a lot of devils in the detail to like how the device is implemented, what it's built around being used for, what the benchmarks are, and how its real world performance on lateral problem solving, like problems that aren't exactly the one thing it was designed for, work. And generally the quantum Fourier transform/Shor's algorithm type of stuff is not the benchmark everyone cares about. They generally care about these hardness circuits, like these worst case circuits. You know, if you've -- for the cryptography audience, if you've ever studied like IO or garbled circuits, you could think of there being a quantum version of that that represents a random garbled circuit. And you need to solve something that looks like satisfiability for it. That's considered the gold standard or the hard to prove that you've done something that a classical computer can't do. And those types of things are very different than the practical things. So you might have built a device around like winning the benchmark, like beating the benchmark. But that device might actually be still kind of not super practical for doing like finding Satoshi's keys. [00:36:06]: Anna Rose: But isn't there motivation to -- and not because -- I mean, bitcoin keys is like the least of -- it's like, think about all sorts of encryption that would destroy states. I feel like, is there enough motivation? [00:36:20]: Tarun: But most of the positive usage of quantum computing is not cryptography related. Most of it is simulating physical systems really quickly, and doing kind of like the stuff that when Guillermo was my intern in 2016 -- [00:36:34]: Guillermo: That's right. [00:36:34]: Tarun: Like yeah, the stuff we were working on, like you could do that like 10 to the 15th times faster or whatever. Right? That's like that's kind of why people want quantum computers. So Google is actually focused on the science side much more than the cryptography side. And that's also why I think like -- I find the marketing aspect of it, very unsavory. I get it, but the idea that your CEO is going on TV saying, like this proves the multiverse exists is a little embarrassing to me. This is like -- [00:37:02]: Guillermo: Did they actually say that. This is to -- that's actually why I like paid for. [00:37:04]: Tarun: Go read the blog post. It's like, it is embarrassing -- [00:37:06]: Anna Rose: Is what they released actually a thing? Like, so maybe the marketing's wrong, maybe like -- but is it a first step towards something, or is it all fluff? [00:37:16]: Guillermo: I mean, for what it's worth, I've only very casually read the stuff. I was interested in quantum computing, doing a master and part of the PhD, which is the reason why I did some of the stuff I did, but I don't -- I mean, I'm sure it's like a nice step towards the same things that everyone has cared about for a while, but it is a step. It's not obvious to me that this is like an enormous -- I think the biggest thing that was very interesting was kind of a positive claim that they made, which has kind of fallen by the website -- wayside, which is this, in quantum systems, there's a big problem with errors that kind of -- they get accumulated in the system, and at a certain point, your signal becomes mostly noise, right? So you can't use it in any useful way if too much noise gets into this. I don't want to get too much into detail, but too much noise gets into the signal, right? And then the point is, like what they showed is, what normally happens as you make the systems larger, you get more error. [00:38:10]: Anna Rose: Yeah. But here, because of error correction -- [00:38:11]: Guillermo: What's weird -- [00:38:12]: Anna Rose: They were able to not get more error or like less. [00:38:15]: Guillermo: But it's not just that. So what's interesting is here, as the system gets larger, you actually get less error. And that's what's -- [00:38:22]: Anna Rose: And error is what you're saying, right? E-R-R-O-R. [00:38:24]: Guillermo: Error, like error. Like the -- E-R-R-O-R. [00:38:26] Anna Rose: Not air. [00:38:28] Tarun: Not air. [00:38:29]: Guillermo: Not air. Yeah, yeah. No. Not air, like generic oxygen or like nitrogen mixed with oxygen. [00:38:34]: Tarun: Or STARK AIR. [overlapping conversations] [00:38:35]: Anna Rose: -- no naming confusions. [00:38:37]: Guillermo: Or that it's going to be it. [00:38:39]: Anna Rose: Okay. [00:38:39]: Guillermo: Yeah. So what that was -- what was weird? That was like, what was like, oh, shit. This maybe is like, very -- [00:38:44]: Anna Rose: Do you know anyone who's checking this or how does this get verified? [00:38:50]: Guillermo: The fun part about -- [00:38:50]: Tarun: There's a lot of Trust Me Bro in hardware. Like, that's just a fundamental truism, right? It's like you can't really verify the hardware. [00:38:57]: Guillermo: The fun part about physics is actually just -- it's shocking how much of it does not reproduce, which is very weird because everyone holds physics as the golden center of reversibility, because sometimes yeah, it's -- [00:39:09]: Tarun: Well, you used to not be able to be become Stanford's president by faking your results for 20 years. Unfortunately that's true nowadays. [00:39:18]: Guillermo: To be fair, yeah. That was -- well, that was like biochemistry. I don't know. I'm not sure. [00:39:20]: Tarun: I know, I know. But like, I mean it's a societal value thing that like -- [00:39:23]: Anna Rose: Other challenges and setbacks. I'm going to just say like, I think we just highlighted one which was like applications almost like reverting back to infrastructure, which was not something we were hoping for this year. We were hoping to see like standalone application. Is there anything else? [00:39:41]: Nico: Yeah. I found that competition got a bit nasty. [00:39:45]: Anna Rose: True. [00:39:45]: Nico: Maybe it already was, but it got a bit nasty -- [00:39:48]: Tarun: It always was. It just wasn't on the surface. [00:39:50]: Anna Rose: Well, it always was. It was just in different categories like the L1s or the rollups with last year's battle. Right? [00:39:56]: Nico: Yeah, yeah. But communications got a bit nasty around it and that's, I think, unfortunate for the whole space. And I think it is a challenge moving forward. Like how are we going to make sure that it doesn't happen again. [00:40:08]: Anna Rose: Or maybe just the nature of the size of the ecosystem, sadly. And like the money on the line, it attracts more of that, I think. Tarun, you had sort of hinted at the rollup roadmap in our pre conversation here. [00:40:24]: Tarun: I basically think like fundamentally, and I'm biased now because I'm writing some small note on paper on this, but there's actually this fundamental annoying problem about rollups, which is, if I have a system that has n rollups, in the worst case, the amount of transaction demand that I need to make up for the lost revenue to the L1 grows with the number of rollups. So like in a world with a thousand rollups, I basically need a thousand times the transaction volume to compensate for like L1 lost revenue due to congestion. [00:41:00]: Anna Rose: Which makes total sense actually. [00:41:02]: Tarun: And so -- it's sort of like, you're taking away all this MEV auction stuff which pumps up the revenue. Like if you look at Solana where the revenue's huge from that, and if you look at how much competition you get from having all the rollups, you sort of get this like lower bound, which is kind of annoying. So I think that the idea that there's going to be a million rollups and you're going to need -- you know, the services sold to the rollups like DA and stuff are going to be valuable is like a lot harder of a claim to make in 2024 when you look at the rollups, it's concentrated to the top 3 or 4. It's clearly not like the ecosystem -- rollup Ecosystems haven't figured out how to not just be tricycles that happen to have a bridge, a validating bridge to Mainnet. And I just generally think like there, as great as a lot of things that are within Ethereum are, like there is a sense, and like I'm -- again, this is sort of like one of the reasons I've been thinking a lot about this and writing about this is like this. Everyone on Twitter will be fighting about are rollups parasitic to Ethereum or not? Are they removing all the volume and demand and then no one wants to hold the asset, whatever. There's a sense in which it's true, but only if the transaction demand for the whole network is below some threshold. And the problem is we're kind of below that threshold. Like we just don't -- we don't have enough demand to justify. If you look empirically, it's like kind of actually kind of weird. And that's why you see kind of, I think, the success of the Solana and Move type of stuff right now compared to some of the things In the -- [00:42:45]: Anna Rose: Although this isn't ZK specific. [00:42:47]: Tarun: But it not that it can't change. [00:42:48]: Anna Rose: I guess, this is just like one of the these -- this is -- [00:42:49]: Tarun: This isn't ZK. Yeah. This is -- [00:42:51]: Anna Rose: This is zk-Rollups included. [00:42:52]: Traun: But I think the zk-Rollups have an even worse version of this, right? They have a higher cost basis. [00:42:57]: Anna Rose: Yeah. [00:42:58]: Tarun: To go hurdle rate. They have to like have all the proving working. They have to have that be cheap, on top of all the other things that the current ones have. So that means they need even more transaction demand. And if you look at them, they have much less. [00:43:11]: Anna Rose: Although don't they make money through these provers, like having proof -- like doing proofs on-chain kind of? [00:43:19]: Tarun: Okay. Okay. So -- [00:43:21]: Anna Rose: I don't think it cost more. [00:43:21]: Tarun: I think like the world, it does -- [00:43:23]: Anna Rose: Like make more via one. Yeah. [00:43:24]: Tarun: The real question is, will ZK get more in my head and this is sort of like again more philosophical question. But will ZK get actually used in applications when the cost of proving is -- and the actual proof generation is the valuable part or will it actually get used when proving basically cost zero? [00:43:46]: Anna Rose: So you're saying like we're heading towards a zero cost anyway? So like the -- it won't -- [00:43:52]: Tarun: If we're heading towards zero cost, that's how you get distribution. And so like it's -- but I do think the zk-Rollups that are live now are in this weird kind of catch-22 where it's like the cost is high now. So they have to somehow get more transaction demand than Base or Arbitrum. And that seems very unfeasible in 2024, I think. [00:44:12]: Guillermo: I think, yeah. The hard part for me is betting on ZK costs remaining high and then people paying for it, feels very much like betting against the improvement of technology and the improvement of proof systems, which if we've learned anything over the past literal four years, is that those things feel like they're going to zero extremely quickly. Maybe there's some fundamental limitation why this time it's different and all the stuff. But I do have a hard time with this. It's like if you're depending fundamentally on the economics of proofs costing some minimal amount, I feel like I have bad news betting against technology. We have literal supercomputers in our pockets. [00:44:52]: Anna Rose: This puts into question lots of projects actually. Because aren't prover networks sort of based on that too? [00:44:59]: Tarun: I'm not saying they won't be valuable necessarily, I'm just trying to say the following statement, which is like in proof-of-work, the value of the hardness of the process is important to the network. [00:45:12]: Guillermo: That's right. That's right. [00:45:12]: Tarun: It's -- in fact one where like by not adding in new technology to the network -- [00:45:18]: Guillermo: That's right. [00:45:19]: Tarun: You're kind of making the creation process more valuable. But in everything else where it's a technology thing, if the technology improves, the cost has to go down. Like it shouldn't be that the cost goes up to keep participating in the network. And so, there's this tradeoff between those two tensions. Right? These are claims that are in infinite time and infinite resource world. Like you could spend as much money and as much time to get to that advancement. So there's obviously going to be some time period where that's not true. But where those two kind of things meet, where the production cost is as valuable as the consumption cost in some sense, is like the thing that you're predicting. And I just sort of think ZK has a weird cost curve right now where it's like -- and unless it can increase its transaction demand like a 1000X, it's like it does seem kind of like it's always going to be at a loss to the non ZK version. At least for rollups. Just for rollups. Just for rollups. [00:46:12]: Anna Rose: So we just have a few minutes left in this episode. But as I had said at the beginning, I really want to touch on 2025 and what could be coming in the ZK space for 2025. Predictions people. Don't we love them? I, again, sadly forgot to check last year's, so I may accidentally say the same thing again. I have a feeling one of those would have been more applications in 2024. And I would at least like, in a hopeful sense, pitch that forward. But yeah, what do you think? What do you think is coming up in ZK in the new year? [00:46:49]: Nico: I think for me it's more of a wishlist than a prediction. But I want to see proving for people. No more proving for big servers, for rollups. I want to see proving for people. I want to see it happen on your phone or if it's not happening on your phone, I want to see it delegated privately. [00:47:05]: Guillermo: Yes. [00:47:06]: Nico: But yeah, I want people to actually build on phones. Kind of in the same way it's easy to fall back to building a VM, it's also easy to fall back to building -- [00:47:14]: Anna Rose: Server side. [00:47:15]: Nico: Proof systems or applications -- well, no tools. Yeah, for big beefy servers. It's harder to build them for phones. That's my number one item on the wishlist. And I think that's also what a lot of people are going to be targeting. [00:47:28]: Guillermo: Yeah. I mean, I think I had this prediction last year too, which is like client-side proving. Like, come on, what are we doing? What are we doing here? This is supposed to be privacy software, not like SaaS, right? We don't need a rack somewhere to do the things for us. We have supercomputers in our pockets. We should just use the supercomputer in our pockets. Do the thing. Like come on. Anyways, I'm very mad about this and I agree - [00:47:48]: Nico: You want to put the ZK back into ZK. [00:47:51]: Guillermo: Correct. [00:47:51]: Anna Rose: I see 2025 as being a time of certain kinds of -- almost like the experiments and pitches from 2023 and 2024. I hope go live enough that we get to see if they work or not. So these include some of these categories we talked about, like the coprocessors, the prover networks, there's the verification aggregators. Like, these are interesting, but they've felt so far somewhat unproven. The economics aren't as clear. Exactly how they interact with the different systems they plan on interacting with isn't completely clear. How many there should be if there's even a market. Like these are kind of questions that I feel like I've been having for many, many months and maybe like more than a year. And I'm hoping that in 2025 we start to see the answers. It's not to say they'll be good or bad. It's just like that's kind of what I'm hoping would be like we get some sense for these things. [00:48:43]: Tarun: I'll give one instead of a predict -- you know, I gave,I guess, an earlier prediction that an existing application will be a better user than any new application. And I count rollups in the new application. But let me tell you the most successful usage of cryptographic techniques in terms of a money making application in crypto this year. [00:49:05]: Anna Rose: I think I know what you're gonna say. [00:49:06]: Tarun: Take a guess. Each of you. [00:49:07]: Anna Rose: I know what it is. [00:49:07]: Tarun: You get one guess. [00:49:08]: Anna Rose: I think it is a project I'm not a big fan of. Okay. Okay. [00:49:12]: Tarun: I don't know if you're a big fan of. [00:49:12] Anna Rose: No. Then it's not what I thought. Okay. It's not what -- you would have known what I meant. Okay. [00:49:15]: Tarun: I don't think -- I actually don't -- I don't know. I don't know. I don't know your opinion. [00:49:18]: Guillermo: Although, I do think it is that. But well, for me. But -- [00:49:21]: Tarun: Okay, guess. Give me your guess. Give me your guess. [00:49:23]: Guillermo: Total number of proofs produced? [00:49:24]: Anna Rose: Like economic. [00:49:26]: Tarun: No, no. In terms of using cryptographic tools on a mobile phone for an end user. [00:49:31]: Anna Rose: Oh, then it's Worldcoin, isn't it? [00:49:32]: Guillermo: I think Worldcoin. [00:49:32]: Tarun: BONKbot make makes way more money. [00:49:37]: Guillermo: What? [00:49:37]: Tarun: BONKbot is done completely in TEEs on mobile devices. Made $300 million last year. [00:49:44]: Anna Rose: Although TEEs. [00:49:45]: Guillermo: Holy shit. Wait, that's incredible. [00:49:48]: Tarun: Yes. You should read the BONKbot TEE architecture. It's actually quite -- I was quite impressed. [00:49:52]: Anna Rose: Hilarious. [00:49:53] Tarun: For something that's like doing memecoin trading. So this is where my point is that like all the stuff that people are spending money on, I think eventually we'll see -- you'll get the seep in of mobile privacy. Especially as people are using way more mobile apps for crypto. Like, as weird as it is to say, no one has gotten more mobile app usage of wallets than memecoins, which is kind of scary and sad at the same time. [00:50:22]: Anna Rose: It's like fast stock trading. It's like Robinhood-y. What's the worst outcome for ZK in 2025? What's like a bad thing that we're afraid of? [00:50:33]: Tarun: Rollups are the only consumers of proofs. [00:50:35]: Nico: No applications. [00:50:37]: Guillermo: I mean it is a worst case outcome, but I don't know -- [00:50:40]: Anna Rose: Yeah. I don't think that's going to happen. [00:50:39]: Guillermo: Like for me the probability that happens is zero. [00:50:42]: Tarun: You haven't talked to enough zkVM teams. They all think that rollups are the best customers. [00:50:47]: Guillermo: No, they're by far the worst. Like, I don't know, I find it hard to believe that we're not just going to be slinging proofs from our phones all the time in the next 10 years or something, you know. [00:50:54]: Anna Rose: I also do think it might be. [00:50:56]: Tarun: We said next year, not 10 years. Next year. [00:50:59]: Guillermo: Oh, next year. Okay, fine. Yeah, maybe next year, fine. All right -- [00:51:00]: Anna Rose: Okay. I'll give -- wait, I'll give another best one. Best one would be like -- well, kind of best. I don't know if this is that great, but some existing huge monolith technology company starts to be deep, like ZK becomes like a deep part of their stack, which is exciting because it would be like, then the number of people touching it would be very cool. And this tech would go further. The bad thing is obviously, the whole spirit would change potentially. And the fix -- the focus, it would almost be like that company could almost absorb all of this work we've been doing, building out the ideas around this, and then just kind of take it sort of as their own, which would be a bummer. [00:51:43]: Nico: I mean, you were in music before Anna, so maybe this analogy is going to help resonate with you. Like when you're in Underground Indie circles, you love the kind of music you're doing, and you want it to be pushed out to as many people as you can, but suddenly when it becomes mainstream and when mainstream music sort of appropriates that kind of stuff, it becomes uncool. [00:52:02]: Anna Rose: Totally. [00:52:02]: Nico: And it is what you wanted in the first place. But then when you get it, you're very sad about it. [00:52:08]: Anna Rose: That is so fascinating to me. I completely -- yeah, Underground from the 90s, indie from the 2000s. [00:52:17]: Nico: Yeah, yeah, yeah. I think we should be okay with it. I'd be happy to see it go mainstream. I'd be happy to see Apple wallets have a crypto wallet in it and you can sign with FaceID. Super great. Uses TEEs on the device already. Wonderful. Kind of sucks for the Indie developers, but it's good for the end user. [00:52:36]: Guillermo: Yep. There may or may not be at least one large company doing this, but it's fine. [00:52:40]: Tarun: Yeah. I feel like there already are. Like Cloudflare, I know -- [00:52:44]: Anna Rose: They always have though. [00:52:44]: Tarun: Cloudflare. I would actually put money on Cloudflare using ZK first. [00:52:46]: Anna Rose: But they did. They always did. They just used it in a really tiny way. [00:52:50]: Tarun: But as in like using more, like using recursion, for instance. I would actually, if anyone uses it first, it's probably them. [00:52:57]: Anna Rose: Another worst outcome then is like a very bad big project or big company or big entity or state or something using it. Like maybe that would be the opposite. [00:53:09]: Tarun: It's permissionless, Anna. There's no good or bad here. [00:53:14]: Nico: Actually, worst outcome, some kind of huge breakthrough but gets patented. And then like no one cares. [00:53:18]: Tarun: Oh that one is – [00:53:19]: Anna Rose: That's what I worry about FHE for this, by the way, guys. Too many patents in FHE not going to name names, but someone. I think they might kill their own industry if they don't like open it up a little bit more. Is there anything you guys want to share about what's coming up? [00:53:35]: Nico: For me, nothing specific, just more research hopefully. [00:53:39]: Tarun: Honestly, just like -- I feel like I've spent the last year falling out of closer to cryptography stuff and getting back more into DeFi stuff. I think that's -- because I think it really is back. [00:53:53]: Anna Rose: DeFi-pilled once more. Before we sign off, I just wanted to share a bit about this show as well, because as you know, we've been on break, and we haven't been releasing as regularly, although we have released one a month, which is cool. So yeah, the plan is after taking a bit of time off, I had a chance to -- I don't know, get a little bit of inspiration going. A lot of these new use cases and directions, these are things that I've been reading about. And so, I'm really excited to come back to these interviews and to start up the show again. The plan right now is to start releasing again around mid January. I don't have anything scheduled yet or recorded. So maybe we have to push that back by a week, but that's what we're looking at sort of mid January. I'm still not sure if I come back weekly, like every week, all the time, but I'm sort of playing with the cadence and we'll figure that out over the next few months. But yeah, I mean, I just -- I feel like taking some time away. What it made me do really was it made me start to miss these interviews and obviously seeing you guys, my co-host, but also digging into these topics. I find it always very challenging intellectually. It's broadening in a lot of ways instead of sort of narrowly focusing in on my day-to-day. It's really great. I think one of the challenges I've had is being super, super hands-on and operational on the events front and running these three companies. But yeah, I think in the new year, I mean, I have an amazing team around me with Gaylord and Quentin over at ZK Hack, Agni and Rachel and Henrik and everyone over at the podcast, also the entire ZKV team, who's really rolling right now. So I feel like, yeah, in the new year, I'm going to be able to focus more on these episodes, which is something I really want to do. Okay. And then I have one last thing I want to share, which is about the events coming up. So in the new year, in 2025, there's already two events planned. One on the ZK Hack front, which is for ZK Hack Seoul. This is going to be in Korea right around the BUIDL Week. So if you're in that part of the world in April, the event will be happening April 11th to 13th, right after ETHTaipei, right before BUIDL. And so if you're there, please join us. If you are one of the ZK Hack community members, and you've been at all the hackathons, I hope you'll put that in your schedule for the new year. If you have never been to a ZK Hack hackathon, but really want to check it out, yeah, join us as well. Korea's pretty amazing. I've been there once, and it kind of blew my mind. I think it may be, yeah, one of the coolest places I've ever been. So it's very cool to get to do an event there. The other thing, and maybe more relevant to this audience is ZK Summit 13. We have our location, we have our dates, and I'm very excited to share this with all of you. The ZK Summit 13 will be happening on May 12th in Toronto. This is the first time we bring the summit to Canada and the second time we bring it to North America. But the last time we were there was in 2019. So this is pretty exciting to be doing a ZK Summit in North America. Yeah, it's happening right around the Consensus Event as well. Just so you know, though, we actually found this location and scheduled this before we knew about that. So it's not meant to be kind of piggybacking on that, but it just kind of worked out that way. Yeah. So I hope I'll see a lot of you there. Put that in your calendar. Just so you know that we won't even be opening applications or anything until February. We want to get sort of fresh research for the talks. And also just generally we tend to do that in more of like a three month window. But if you're gonna be there, if you're planning on being there, just put that in your calendars already, and stay tuned on all the channels, because that's where I'll be sharing more. All right, guys, thank you to all of you for joining this sort of finale to the year on the ZK Podcast, this special episode where we looked back and looked forward. Yeah. Thanks for being on. [00:57:42]: Nico: Thank you. [00:57:43]: Tarun: Glad to be here. [00:57:44]: Guillermo: Thank you for having us. [00:57:45]: Anna Rose: I want to say thank you to the podcast team, Henrik, Rachel and Tanya, and to our listeners. Thanks for listening.