Wrapping up the KZG Ceremony

The KZG Ceremony was the largest multi-party computation of its benignant (by fig of participants). Through an open, accessible process, it produced a unafraid cryptographic instauration for EIP-4844.

Learn much astir however the Ceremony worked successful Carl Beekhuizen's Devcon talk: "Summoning the tone of the Dankshard"

As the Dencun upgrade approaches, this station volition service arsenic a broad grounds of outcomes and radical that brought the Ceremony to beingness successful 2023.

Outcomes and Methods

The Ceremony ran for 208 days: from Jan 13 13:13 UTC 2023 until Aug 08 23:08 UTC 2023

141,416 contributions made this the largest setup of this benignant astatine the clip of publishing.

Contributors were required to sign-in via Github oregon authenticate utilizing an Ethereum code for spam prevention.

• 132,021 (93.36%) utilized Sign successful with Ethereum
• 9,395 (6.64%) utilized Github

As further spam prevention, Ethereum addresses were required to person sent a definite fig of transactions (also referred to arsenic "nonce") earlier the commencement of the Ceremony astatine artifact 16,394,155 2023/01/13 00:00 UTC. This request was modified throughout, depending connected the needs astatine that time.

• Jan 13 - March 13: nonce 3
• March 13 - April 01: nary caller logins, but the lobby was allowed to wide out, ie. anyone already logged-in was capable to implicit their contribution.
• April 01-16: nationalist contributions closed to accommodate Special Contributions
• April 16-25: 128
• April 25-May 8: 64
• May 8-25: 32
• May 25 - June 27: 16
• June 27 - Aug 23: 8

To forestall bots oregon scripts from interrupting honorable contributors, the process was acceptable up to blacklist immoderate accounts with excessive logins/pings. To reset honorable accounts accidentally added to the list, the blacklist was cleared four times passim the publication period.

Please enactment that we bash not urge utilizing KZG contributions arsenic a reliable database of unsocial identities e.g. for airdrops. While the sign-in and nonce requirements encouraged honorable entropy contributions, these were yet insignificant impediments to actors wanting to lend aggregate times. Analysis of the transcript and onchain enactment intelligibly amusement that galore contributions came from linked addresses controlled by azygous entities. Fortunately, due to the fact that these contributions were inactive adding entropy, it doesn't detract from the soundness of the last transcript output.

Verifying the transcript

8ed1c73857e77ae98ea23e36cdcf828ccbf32b423fddc7480de658f9d116c848: is the sha-256 hash of the last transcript output.

The transcript is disposable connected GitHub successful the ethereum/kzg-ceremony repo oregon via IPFS nether the CID QmZ5zgyg1i7ixhDjbUM2fmVpES1s9NQfYBM2twgrTSahdy. It was added to the spec successful this PR.

There are respective means of verifying the transcript. It tin beryllium explored and verified connected ceremony.ethereum.org, oregon with a dedicated verification script written successful rust.

Learn much astir the checks implemented present successful Geoff's blog post: Verifying the KZG Ceremony Transcript.

There was a commemorative POAP NFT which could beryllium claimed by contributors who logged successful with their Ethereum address. The plan of the POAP matches that of the archetypal hosted interface, and includes the hash of the transcript successful the borderline (8ed...848). To date, implicit 76k NFTs person been claimed by participants. Anyone who verified the transcript output was besides capable to tweet arsenic societal impervious of success: spot caller verification tweets here.

As noted above, we bash not urge utilizing the database of minted POAPs arsenic a beardown anti-sybil signal, eg. for airdrop eligibility.

Special Contributions

April 1-16 2023 was the Special Contribution Period for the KZG Ceremony. This allowed participants to lend successful ways that whitethorn not person been imaginable successful the Open Contribution period.

While the Ceremony lone needs a azygous honorable subordinate to supply a unafraid output, Special Contributions supply further assurances beyond a modular entropy contribution:

• computing implicit the entropy successful an isolated situation (eg. connected an air-gapped machine, wiping and physically destroying hardware) means it's improbable for a malicious entity to person extracted the entropy astatine immoderate point
• detailed documentation (explore links below) attached to existent reputations are improbable to each person been coopted oregon faked by a malicious coordinating entity. The records are disposable for aboriginal observers to explore.
• different hardware and bundle limits correlated risk
• differentiated entropy procreation (eg. measuring an explosion) prevents the Ceremony output being compromised by immoderate nonaccomplishment successful the regular entropy procreation (eg. the hosted interface)
• contributions involving ample groups of radical are harder to fake than those with lone 1 person

See the archetypal Ethereum blog post which documents the 14 peculiar contributions: details connected methodology, wherever to find them successful the transcript, and links to documenting media.

• Cryptosat: entropy from space
• The KZG Marble Machine: 3d printed marble machine
• Mr. Moloch’s Ephemeral Album II: a day-long philharmonic adventure
• Dog Dinner Dance Dynamics: a bully lad get dinner
• CZG-Keremony: a axenic JS KZG ceremonial client
• Improvised Theatre: unpredictable improv
• A Calculating Car: Self-driving car collects data
• A noisy city: Sydney whispers its stories
• Exothermic Entropy: chemicals spell boom
• The Sferic Project: lightning ne'er strikes successful the aforesaid spot twice
• The Great Belgian Beer Entropy Caper: signaling a nighttime of brew with a friend
• KZGamer: summoning Dankshard with a dice-tower
• Catropy: cats proceed being integral to the internet
• srsly: an iOS KZG Ceremony client

The resources present are adjuvant to larn much astir however these constructions work, some mostly and with respect to Ethereum's peculiar context.

• KZG Ceremony FAQ
• How bash trusted setups work?
• EIP-4844
• Proto-Danksharding FAQ
• KZG polynomial commitments
• KZG Ceremony Timeline
• Spec Repo
• Frontend Repo
• Learnings from the KZG Ceremony (Nico's blog post)

Audits

Given the utmost value of information successful this project, 2 audits were conducted, each for antithetic components.

• SECBIT Spec + Implementation Audit - Aug 2022
• Sigma Prime Sequencer Audit - Jan 2023

Client Implementations

There were a fig of autarkic implementations that Ceremony participants could tally locally, with a assortment of antithetic features.

CLI Interfaces

Browser Interfaces

1. audit: QmevfvaP3nR5iMncWKa55B2f5mUgTAw9oDjFovD3XNrJTV
2. doge: QmRs83zAU1hEnPHeeSKBUa58kLiWiwkjG3rJCmB8ViTcSU

BLS Libraries

A monolithic outcry retired to the dozens of radical from the broader Ethereum assemblage progressive successful design, coordination, audits, devops-ing, and penning code. This task would not person existed without your efforts!

Another convey you to the tens of thousands of radical who took the clip to contribute, study bugs, and assistance standard Ethereum.