Ngithole isihloko esifundayo esifundisa iminyaka embalwa. Le nkqubo yinkonzo yami yokuqala esiyingqayizivele nge-zero-knowledge-proof ubuchwepheshe, futhi lithunyelwe ekutholeni ukusebenza yayo yayo. Kulesi nqaku entsha, ngithunyelwe inkqubo eyakhelwe ku-Tornado Cash - ngokuvamile i-zCash-like "embedded blockchain." It is a real Layer 2 isixazululo, njengoba yonke umsebenzi ivela ngokuphelele kwi-chain. Kodwa ngaphambi kokufunda imichiza, sicela uchofoze inkinobho ukubuyekeza isisekelo. Indlela Tornado Cash ukusebenza Indlela Tornado Cash Umsebenzi? Njengoba ngiye ngithole isihloko esifanele ku-theme, ngithole isifinyezo lapha. Uma unemibuzo ku-technical deep diving, ngitholela ukubuyekeza imibhalo yami edlule: I-Magic ye-Zero-Knowledge Proof Through the Source Code ye-Tornado Cash I-JavaScript Tutorial for Zero-Knowledge Proofs Usebenzisa i-snarkjs ne-circom Indlela I Yakhelwe I-Anonymous Voting System kwi-Ethereum Blockchain Usebenzisa I-Zero-Knowledge Proof Ngokuvamile, i-Tornado Cash isebenza ngokuvumelana ne-ETH ye-user deposit noma enye i-token e-Tornado Cash smart i-contract. Yonke imibuzo inesibopho I-smart contract ibhalisele isivumelwano ku-Merkel Tree. Ngemuva kwalokho, umsebenzisi angakwazi ukuthatha imali kusuka ku-address eyahlukile ngokuvumela i-nulllifier. commitment nullifier Njengoba kuphela umsebenzisi uyazi i-nulllifier, akukho umuntu angakwazi ukuxhumanisa ukubheja lokuqala. Kodwa-ke, i-smart contract akudingeka ukuhlola ukuthi i-nulllifier ikhambisana ne-engxaki esiyimfihlo. Ukubonisa lokhu, umsebenzisi ibonise a Ukubonisa ukuthi: zero-knowledge proof I-commitment yindawo ye-Merkel Tree (i-user eyenziwe ngokwenene ku-contract), futhi I-nulllifier iye asekelwe kulesi ibhizinisi. Konke nulllifier kungenziwa kusetshenziselwa kuphela, ukuqinisekisa ukuthi imali kungenziwa engathintela ngaphezulu kwexesha elinye. Ngo-Tornado Cash, ama-hashes ye-commitment ne-nulllifier zihlanganiswe ngezansi: commitment_hash = HASH(nullifier, secret) nullifier_hash = HASH(nullifier) Njengoba i-hashes ye-cryptographic iyinhlangano eyodwa (hhayi ungenza ukufinyelela kokuqala kusuka ku-hash ngaphandle kwe-brute force), akwazi ukuxhumana i-hash. Ngiya Nokho, uhambisana kwabo kungenziwa ngokuvumelana ne-Zero Knowledge Proof. commitment_hash nullifier_hash I-limit ye-system yayo ikakhulukazi ukuthi inani elithunyelwe ingasiza ulwazi. Ngokwesibonelo, uma ushiye i-ETH ye-12.34 bese ushiye i-ETH ye-12.34 ngokushesha, umuntu angathanda ngokushesha ukuthi ezimbili zihlanganisa. Ngakho-ke i-Tornado Cash inikeza kuphela ama-denominations ezinsizakalo njenge-0.001 ETH - uma wonke umuntu isebenzisa inani elifanayo, i-unlinkability iyatholakala. I-concept ngithole ku-section elandelayo isixazululo le-limitation, ukujabulela kanjani i-zCash isixazululo. Ukuphendula inkinga ye-Denomination Fixed I-limit ye-deposit ye-fixed amayunithi ingashintshwe ngokuvumela izindlela ezimbili ezingaphezu kwe-deposit kanye ne-revocation: Waze . split merge Waze I-function isebenza efana ne-pull-out, kodwa ngaphandle kokufaka i-Ethereum address, umsebenzisi ibonise amabhizinisi amabili amasha. I-split inikeza umsebenzisi ukwahlukanisa inani elihlaziywa kumahhala amabili - futhi okungenani, lokhu kusebenza ngaphandle kokuvumela amabhizinisi amasha abantu abacwaningi we-blockchain. Ukuze kusebenze lokhu, ibhizinisi kufanele kuhlanganise inani njengezinhlelo zebhizinisi yayo. split Kwi-system eyakhiwe, isivumelwano eyakhelwe kulandelayo: commitment_hash = HASH(amount, nullifier, secret) Lokhu isakhiwo kuyimfuneko ngenxa yokuba, ngesikhathi se-sharing, abasebenzisi kufanele ibonise ukuthi izindleko ezintsha ezimbili zihlanganisa izindleko eziningana ngokufanelekileyo nezimali yokuqala. Kulula ukubona indlela le mekanism isixazululo kwamanani esiyingqayizivele e-Tornado Cash. Ngokwesibonelo, umsebenzisi angakwazi ukhokhe imali esivamile efana ne-100 ETH, zihlanganisa izingxenye (isib. 60 ETH no-40 ETH), futhi ngokushesha ukuchithwa ku amahlathi ezahlukene. Njengoba ama-values zihlanganisa ngaphakathi kwezimali, akukho umuntu angakwazi ukuxhumanisa ukuchithwa ku-deposit yokuqala ngokuvumelana nezimali kuphela. Ngaphezu kwalokho, akufanele ukuthatha imali ngokushesha. Abasebenzisi angakwazi , isebenza njengama-wallet virtual. Lokhu kubhalwe ngu- Ukusebenza, okuvumela izivumelwano ezimbili ezihlaziywa (okuthunyelwe nge-nullifiers zabo) ezihlaziywe ku-one new commitment. store value in the smart contract itself merge Ukuze usebenza i-fusion, abasebenzisi kufanele ibonise ukuthi inani elikhulu kunazo zonke amabhizinisi amaphuzu amaphuzu amaphuzu amaphuzu amaphuzu amaphuzu amaphuzu. Oku kuholela uhlobo , lapho wonke abasebenzisi unayo isilinganiso se-private futhi ingathumela imali ngempumelelo nabanye. Izimali ezidingekayo kuphela lapho umuntu ufuna ukufinyelela ku-system kanye nokuthumela izakhiwo zabo ngaphandle kwesi-private layer. embedded ledger I-Privacy-Preserving Layer ku-Ethereum Sishayele nge-example ukuze ubone indlela le-privacy layer isebenza ekusebenzeni: I-Alice ivela i-100 ETH pool ku-smart contract ngokubethelwa i-100 ETH kanye nenkinga. U-Bob usebenza okufanayo, ukwakha i-ETH pool ye-10 nge-commitment yayo. Alice ufuna ukunikeza 10 ETH ku-Bob. It isebenzisa isicelo esihlukile, okuyinto ivimbele i-nulllifier yayo futhi ivimbele i-100 ETH yokuqala ezimbini ezintsha: eyodwa ku-10 ETH futhi eyodwa ku-90 ETH. Manje, Alice inesibopho amabili - eyodwa esibonakalayo i-10 ETH, eyinye i-90 ETH. I-Alice inikeza i-Nullifier ye-10 ETH usebenzisa i-Public Key yeBob futhi ibhalwe ku-blockchain. I-Bob isixazululo idivayisi ngokusebenzisa isifinyezo se-private yenza i-nulllifier. Ngaphezu kwalokho, ungathola i-ETH ye-10 noma ukuxhumana ne-balance yayo. U-Bob ukhethe ukugcina ama-funds ku-system, ngakho-ke usebenzisa i-fusion operation. Uyakunikeza i-nulllifier kusuka ku-ETH yayo ye-10 yayo kanye ne-Alice, bese ukwakha i-commitment entsha ye-20 ETH. Ngemva kokuthengisa: I-Alice inesibopho se-90 ETH, Bob manje ukulawula 20 ETH ku-privacy layer. Njengoba ama-nullifiers kanye nama-commitments akuyona ulwazi olulodwa ngokubanzi, futhi ama-messages phakathi kwabasebenzisi zihlanganisa, zonke lezi zokusebenza zihamba. . completely anonymously Njengoba abasebenzisi angakwazi ukudlulisela impahla ngaphakathi kwekhwalithi ngaphandle kokubonisa inani noma idivayisi, kunokuba akufanele ukuthatha. , nge enye ingxenye ebalulekile: . Layer 2 blockchain everything happens on-chain Conclusion Ukuphakama Ngokuvumela izicelo ezimbili ezivamile - Waze — singakwazi ukwandisa kakhulu i-Tornado Cash yokuqala nokuguqulwa ku-full-fledged ku-Ethereum. Ngokungafani ne-mixers ezivamile ezijwayelekile ezivamile ezivamile, le model eyakhelwe isekelwe isekelwe , okuvumela abasebenzisi ukwahlukanisa, ukwahlukanisa kanye nokuthumela inani ngokufanelekileyo futhi anonymously. split merge privacy-preserving transaction layer arbitrary amounts Ngokusho, uhlelo lihlanganisa Ngena ngemva , futhi Ukubandisa inani ngqo ku-engxaki, abasebenzisi angakwazi ukuhlola isebenzo se-value-preserving njenge-splitting kanye ne-fusion, ngaphandle kokubonisa inani efanayo noma abalandeli abalandeli. zero-knowledge proofs commitments nullifiers Umphumela wokwenza uhlobo Okuzenzakalelayo , ngaphandle kokufuna Layer 2 eyahlukile. Abasebenzisi angakwazi ukugcina amabhizinisi ngokuzimela, ukunikela amabhizinisi ngamunye usebenzisa imiyalezo encrypted, futhi kuphela ukuthatha lapho kufanele ukuxhumana ne Ethereum layer. Le design ibandakanya Nge The , ukwakha isakhiwo esinamandla ye-anonymous, i-programable value transfer. embedded blockchain on-chain privacy features of zCash smart contract capabilities of Ethereum Okuningi, le model iyahambisana , okwenza isakhiwo esebenzayo futhi esilinganiselwe izicelo zokuphefumula ubumfihlo ku-Ethereum ecosystem eningi. any EVM-based blockchain
