### Aragon and Aztec join forces to bring private voting to NounsDAO

State-of-the-art DAO private voting with minimal off-chain dependency via Ethereum storage proofs & timelapse encryption.

*(DAO proposal) 2023-03-06*

### BatRaVot: Scalable Trustless Voting on Ethereum

BatRaVot is a trustless voting protocol that allows for both on-chain and off-chain voting with on-chain results, making it a cost-effective and versatile solution for various types of voting scenarios on the Ethereum blockchain. In the blog post we explain the protocol and present our implementation that you can already use today.

*2023-01-19 by Artem Grigor*

### Notes on elliptic curves over finite fields and their pairings

Manuscript release

*2022-12-23 by Matan Prasma*

### Selected Topics in Cryptography: from the basics to e-voting

In this post we announce the first set of cryptographic notes published at Aragon ZK Research.

*2022-12-23 by Vincenzo Iovino*

### A rust implementation of DualRing’s sum argument

Recently at Aragon we’ve been looking for ways to enable efficient, decentralised private voting. As part of that, we’ve been looking into the state of the art of private linkable membership proofs, as they’re very suitable to act as the base of a private voting protocol. We implemented an interesting subsection of the state of the art in ring signatures, and this post explains why that’s interesting!

*2022-12-22 by Rebekah*

### Decentralised Private Voting

Many private voting protocols rely on central servers, or partially or fully trusted third parties, either for availability or for privacy. This note discusses some ways to achieve decentralised, private, blockchain-based voting, without any trusted third parties.

*2022-12-21 by Rebekah*

### SHA512 and its implementation in Noir

In this blog post, we discuss the SHA512 hash function and its implementation in Aztec’s Noir, a domain-specific language for constructing and verifying zero-knowledge proofs.

*2022-12-14 by Ahmad Afuni*

### SNARVs: Succinct Non-Interactive Arguments of Voting – protocols for cost-effective, off-chain e-voting.

Announcing SNARV: succinct non-interactive arguments of voting.

*2022-11-25 by Vincenzo Iovino and Matan Prasma*

### Blind-OVOTE: OVOTE with Blind Signatures for voter anonymity

Blind-OVOTE is a L2 voting solution which combines the validity rollup ideas with blind signatures over elliptic curves inside zkSNARK, to provide gasless anonymous voting with onchain binding execution on Ethereum.

*(forum post) 2022-11-24 by arnaucube, Alex Kampa and Roger Baig*

### privacy without snarks — one of many proofs

One of many proofs are a membership proof, also know as a ring signature. They rely only on the discrete log problem, not the heavy infrastructure of snarks.

*2022-10-21 by Rebekah*

### Simple Soundness Proofs

Soundness proofs tend to be quite long and technical. We describe a general method to significantly simplify such proofs if some specific conditions are met.

*2022-10-14 by Alex Kampa*

### Weil reciprocity on the projective line

This Maths Seminar note provides a self-contained proof of the Weil reciprocity on the projective line of a field, together with concrete examples. A good grasp of the concepts explained here will help with understanding elliptic curve pairings.

*2022-10-07 by Alex Kampa*

### We present OVOTE: Offchain Voting with Onchain Trustless Execution

OVOTE (Offchain Voting with Onchain Trustless Execution) is a L2 design for voting using validity-proofs (zkSNARK proofs), which is similar to zkRollups. The main idea is that the votes are aggregated offchain, and proved onchain through a zkSNARK proof, resulting in constant gas costs while scaling up to thousands of voters through a single Ethereum transaction.

*(forum post) 2022-07-05 by arnaucube*

### rwc2022 : Threshold ECDSA with additive key derivation and presignatures : an attack, and a solution

Additive key derivation is used widely throughout the cryptocurrency space, as defined in BIP32. Presignatures are used to reduce the round complexity of threshold ECDSA. Though both used very frequently, and often in combination, a security proof for the construction was missing until this point. Shoup and Groth find an attack on threshold ECDSA when using both AKD and presignatures, and present a solution.

*2022-05-11 by Rebekah*

### Adding Vote Delegation to Anonymous E-Voting Schemes

Anonymous e-voting schemes are a promising tool in the current and future digital society. We propose a simple and elegant way to add delegation capabilities to such schemes.

*2022-05-06 by Vincenzo Iovino*

### The Bellare-Micali Oblivious Transfer

Oblivious transfer (OT) is a cryptographical primitive that is fundamental for secure multiparty computation. We give a brief introduction to the Bellare-Micali OT protocol, which is particularly simple and elegant.

*2022-05-03 by Alex Kampa*

### Lagrange bases in subgroups of \(F_p^*\): a hands-on introduction

Our first Maths Seminar note is about Lagrange bases in subgroups of \(F_p^*\) which happen to have a simple and explicit formula. Numerous examples as well as detailed proofs of the main results are provied. We note that these particular Langrange bases have been used in the construction of the well-known PLONK zk scheme.

*2022-05-02 by Alex Kampa*