[D2 · Elena Hall · Signatures] ROM lower bounds — Iftach Haitner
Ethereum · 33:02 · Watch on YouTube
This talk gives theoretical lower bounds on the size of SNARK proofs and signatures in the random oracle model, arguing that for "natural" constructions the best-known upper bounds (roughly Θ(λ²) with small logarithmi...