Abstract: This article will explore the development and challenges of ZKML technology through the cases of Worldcoin and Vanna, and promote the widespread application and prosperity of this technology in the blockchain field.With the rapid development of blockchain technology, data privacy and security have become core issues. Zero-knowledge machine learning (ZKML), as an emerging technology, effectively combines the security of zero-knowledge proofs (ZKP) and the intelligence of machine learning (ML), bringing unprecedented opportunities to the Web3 world.Currently, ZKML technology has a wide range of applications in the blockchain field, mainly including the following aspects:<ul><li>Hardware Acceleration: Due to the computational complexity of ZK proofs, some projects like Cysic and Ulvetanna use hardware acceleration to improve the efficiency of on-chain computation.</li><li>On-chain Data Processing: Projects like Axiom and Herodotus focus on converting on-chain data into formats suitable for ML training and ensuring that ML output results can be easily accessed from the chain.</li><li>Computational Circuit: To enable ML computations to be processed by blockchain ZK, some projects like Modulus Labs and Jason Morton convert ML computation models into circuit forms.</li><li>ZK Proof of Results: To address the trust issue of ML models, projects like RISC Zero and Axiom use ZK-SNARKs-based proofs to verify the authenticity of the models.</li></ul>ZKML is currently developing rapidly and can assist in the construction of Web3 decentralized identity (DID). Previously, identity management modes like private keys and mnemonic phrases made Web3 user experience poor. True DID construction can be achieved through ZKML for the identification of Web3 entity biometric information, while ensuring the privacy and security of user biometric information. Worldcoin is applying ZKML to achieve zero-knowledge DID verification based on iris scanning.This article will delve into the development and challenges of ZKML technology through the cases of Worldcoin and Vanna, and promote the widespread application and prosperity of this technology in the blockchain field.<h2 id="header-0">1.Worldcoin Case Study: Use Case of ZKML in Identity Verification and Privacy Protection</h2><h3 id="1-1-dapp-integration-with-worldcoin">1.1 DApp Integration with Worldcoin</h3>Worldcoin ID can be used for identity authentication. Worldcoin provides an IDKit SDK for identity authentication using the World App, the specific process is as follows:<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/c1bfff6ad8024e999b9f8e7d6569f628.PNG" /><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/a5396c63a9094f15ab6de40f0622ab26.PNG" />After processing the above process, the user&#39;s biometric information is used as a login credential, and a proof is generated in the Worldcoin App to prove identity.<h3 id="1-2-use-case-of-zkml-in-worldcoin">1.2 Use Case of ZKML in Worldcoin</h3>1.2.1 Use Case of ML in WorldcoinBy running the IrisCode model on self-hosted biometric data (user terminal), it verifies whether the user has created a valid and unique WorldID locally and calls the _addMember(uint256 groupId, uint256 identityCommitment) function on the WorldID Semaphore identity group with a valid identity commitment to make the protocol publicly permissionless.1.2.2 Application of ZK in WorldcoinRegistration ProcessDuring the registration process of Worldcoin, users generate a WorldID through iris scanning and call the _addMember function on the Semaphore identity group with a valid identity commitment to achieve publicly permissionless access to the protocol.<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/3277c3a9b55f40bebf4bd013d16e9d5e.png" />Signup Sequencer: The registration sequencer sorts the data (identities) submitted in batches to the Ethereum smart contract.Semaphore MTB: SMTB is a service for batch processing Merkle tree updates. It accepts Merkle tree updates and merges them into one update in batches. This is useful for reducing the number of transactions that need to be submitted to the blockchain. The correctness of batch Merkle tree updates can be ensured by generating SNARKs.Tx Sitter: Signs transactions and sends them to the blockchainProof input is the external nullifier (a public 32-byte value that scopes the uniqueness of verifications) and the secret identity nullifier. The nullifier hash is calculated based on these two for user identity recognition.Login ProcessDuring the login process, the identity nullifier submitted by the user will be converted into a proof, a process similar to zkrollup. After the user submits the identity nullifier, multiple Merkle state updates are aggregated and published to the blockchain.<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/6c41b0e491714c4e8a0870808f63d14a.png" /><h3 id="1-3-summary">1.3 Summary</h3>The technical implementation of Worldcoin involves multiple layers, including the local operation of the IrisCode model, the generation of External-nullifier, the batch processing of Semaphore MTB, and the transaction processing of Tx Sitter. Since the process of running the IrisCode model to convert the iris into a World ID occurs on the user terminal, this part is not run by external nodes to protect user privacy. The combination of these technologies enables Worldcoin to achieve efficient and secure identity verification while protecting user privacy.The Worldcoin case demonstrates the potential and effectiveness of ZKML technology in practical applications. By combining zero-knowledge proofs and machine learning, Worldcoin not only enhances the security of identity verification but also provides strong support for user privacy protection. This case provides valuable references and insights for other blockchain projects.<h2 id="header-1">2.Vanna Network and ZKML: Intelligent Reasoning and Verification in Blockchain</h2><h3 id="2-1-overview-of-vanna-network">2.1 Overview of Vanna Network</h3>The Vanna network is an innovative blockchain platform focused on providing efficient zero-knowledge proof generation and verification services. It combines the transparency and immutability of blockchain with the privacy protection characteristics of zero-knowledge proofs, providing users with a secure and reliable data processing environment.<h3 id="2-2-vanna-network-functions">2.2 Vanna Network Functions</h3><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/f7b9aec7a1dd4f33bea125c7ce8041e0.png" />Query Data: Access Oracle feed data or on-chain status through inter-chain queries of smart contracts.<ul><li>Preprocessing: Use Vanna&#39;s built-in precompiler to preprocess the queried raw data in preparation for reasoning.</li><li>Inference Execution: Run inference seamlessly and scalably at any cryptographic security level suitable for your use case.</li><li>Inference Verification: All cryptographic proofs ensuring inference are verified by validator nodes on the Vanna network.</li><li>Publishing and Traceability: Inference results can be sent to contracts on any chain through cross-chain messaging and published to the data availability layer.</li></ul><h3 id="2-3-vanna-network-features">2.3 Vanna Network Features</h3>1.Parallel Inference Pre-execution<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/cf1621b37550466f92aacf802a72525b.png" />Divided into three stages:Stage 1: SimulationVanna runs each transaction through a simulator to find out which inference requests the transaction will make. No execution here.Stage 2: Inference Memory PoolTransactions and their inference requests are added to the inference memory pool, which sends requests to Vanna inference nodes. Inference and proof need to be executed here.Stage 3: EVM ExecutionInject inference results into the EVM so that transactions can read them directly, just like reading any other variable. Then execute the transaction and submit it to the blockchain.<h3 id="2-3-2-verification-calculation-separation">2.3.2 Verification Calculation Separation</h3><h3 id=""></h3><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/2f1c89d01edf434b9efbfea457e93f85.png" />Vanna Network adopts two types of nodes, verification nodes and inference nodes, and forks network verification and inference calculations onto these two types of nodes separately.Verification Nodes: Rollup nodes independently verify transactions and the state of the Vanna network. Rollup nodes on the Vanna network also participate in verifying cryptographic proofs generated by inference nodes.Inference Nodes: Inference nodes do not verify transactions and blocks on the network but focus only on computing AI/ML inferences and generating cryptographic proofs for inferences.<h3 id="2-3-3-staking-and-penalties">2.3.3 Staking and Penalties</h3>Vanna Network provides crypto-economic security in the form of application layer staking contracts. When inference nodes go online and participate in securing the network, they must post Vanna tokens as collateral in the staking contract. The staking contract enforces the behavior of inference nodes, with slashing conditions including but not limited to:<ul><li>zkML - Generating invalid and cryptographically unverifiable proofs</li><li>opML - Successful challenges to inferences generated by nodes</li><li>zkFP - Successful challenges to inferences generated by nodes or failure to generate a ZK SNARK proof for the inference</li></ul><h3 id="2-4-summary">2.4 Summary</h3>Through its unique design and functionality, the Vanna network demonstrates the application potential of ZKML in blockchain networks. Its parallel inference pre-execution, verification calculation separation, and staking and penalty mechanisms<h2 id="header-2">3. ZKML Development Tool EZKL: Simplifying Zero-Knowledge Proof Generation and Verification</h2><h3 id="3-1-overview-of-ezkl">3.1 Overview of EZKL</h3>EZKL takes a high-level description of a program and sets up zero-knowledge provers and verifiers. The focus is on programs represented by <a href="https://pytorch.org/docs/stable/index.html" rel="noopener noreferrer nofollow">pytorch</a> AI/ML models and other computational graphs. Once set up, the prover can prove statements like:<ul><li>“I ran this public neural network with some private data, and it produced this output”</li><li>“I ran my private neural network with some public data, and it produced this output”</li><li>“I correctly ran this public neural network on some public data, and it produced this output”</li></ul><h3 id="3-2-the-workflow-of-ezkl">3.2 The Workflow of EZKL</h3>The workflow of EZKL is as follows:<img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/01d0650d759445938c7f07d86b0c06d2.png" /><ul><li>Define Neural Network Model: Define a simple neural network</li><li>Model Training: Generate input data and get output through the model</li><li>Model Export: Export the model in ONNX format</li><li>Generate Zero-Knowledge Proof Setup: Generate setup files</li><li>Compile Circuit: Compile the model to generate circuit files</li><li>Generate Zero-Knowledge Proof: Generate SRS, witness files, proof keys, and verification keys</li><li>Verify Zero-Knowledge Proof: Generate zero-knowledge proof and verify locally or create Solidity code and ABI files for EVM verifiers, deploy contracts, and verify proofs on-chain</li></ul><h2 id="header-3">4.ZKML Challenges and Prospects</h2>As blockchain technology continues to evolve, zero-knowledge machine learning (ZKML) is gradually becoming a key force in enhancing application privacy and security. It not only heralds the emergence of innovative applications such as smart contract privacy protection and decentralized finance (DeFi) security enhancement but also promises to become an indispensable part of blockchain technology, providing a solid technical foundation for building a safer and more privacy-focused digital world.<h3 id="4-1-challenges">4.1 Challenges</h3>Although ZKML has great potential, it also faces some challenges in its application process:<ul><li>Technical Complexity: The implementation of ZKML requires profound knowledge of mathematics and cryptography, which undoubtedly increases the difficulty of development and maintenance, requiring developers to have higher professional skills.</li><li>Performance Bottleneck: The process of generating and verifying zero-knowledge proofs is computationally intensive, which may affect system response time and processing capacity. To address this issue, some projects like Lumoz provide a <a href="https://lumoz.org/compute-layer" rel="noopener noreferrer nofollow">modular compute layer</a> to improve performance.</li><li>User Acceptance: Although ZKML provides powerful privacy protection features, users may hold reservations due to a lack of understanding of its complexity and security.</li><li>Regulatory Challenges: The development of privacy protection technology requires regulatory agencies to update relevant regulations to adapt to the changes and challenges brought by new technologies.</li></ul><h3 id="4-2-strong-prospects-strong">4.2 Prospects</h3>Despite the challenges, the deep integration of ZKML technology and the future development of blockchain are full of hope:<ul><li>Technological Progress: With in-depth research and technological maturity, the implementation of ZKML will become more efficient and user-friendly.</li><li>User Education: Through education and popularization, users can better understand the complexity and security of ZKML technology, increasing their acceptance.</li><li>Regulatory Adaptation: The adaptation and innovation of regulatory agencies will provide legal and policy support for the development of ZKML technology.</li><li>Application Innovation: The continuous advancement of ZKML technology will stimulate the emergence of more innovative applications, promoting the application of blockchain technology in a wider range of fields.</li></ul><h2 id="header-4">5.Conclusion</h2>The development of ZKML technology is a significant step in the blockchain field, heralding the arrival of a new era of data privacy and security. In the face of technical complexity, performance bottlenecks, and regulatory challenges, we should remain optimistic and believe that with technological progress and increased user acceptance, ZKML will play a more important role in the blockchain field, driving broader applications and innovations.References<ul><li><a href="https://docs.worldcoin.org/" rel="noopener noreferrer nofollow">Worldcoin Docs</a></li><li><a href="https://zh-cn.worldcoin.org/blog/worldcoin/intro-zero-knowledge-proofs-semaphore-application-world-id" rel="noopener noreferrer nofollow">Intro to zero-knowledge proofs, Semaphore and their application in World ID</a></li><li><a href="https://www.odaily.news/post/5188011" rel="noopener noreferrer nofollow">In-depth Interpretation of ZKML: Technical Principles, Application Scenarios, Advantages, and Challenges</a></li><li><a href="https://www.coinonpro.com/news/toutiao/264763.html" rel="noopener noreferrer nofollow">Is Worldcoin on the right path to scanning iris for personality verification?</a></li><li><a href="https://medium.com/vanna-labs/a-gentle-introduction-to-zkml-8049a0e10a04" rel="noopener noreferrer nofollow">A Gentle Introduction to zkM</a></li><li><a href="https://www.wublock123.com/index.php?m&#61;content&amp;c&#61;index&amp;a&#61;show&amp;catid&#61;6&amp;id&#61;28019" rel="noopener noreferrer nofollow">a16z Crypto investor: Zero-knowledge (ZK) technology is seriously undervalued</a></li></ul>

A Deep Dive into the Use Cases and Future of ZKML in Web3

Table of Contents

Lumoz

Other articles published on Jul 25, 2024

Anthony Scaramucci Writing Bitcoin Book With Michael Saylor: 'This Is Where The Future Is'

Ethereum vs Bitcoin ETFs: Which Will Emerge as the Victor?

Ripple CEO Brad Garlinghouse supports Kamala Harris’ potential crypto policies

Machine Learning Algorithm Predicts Shiba Inu Price Will Rise 119% In 5 Days

Horizon DeFi Podcast Ep. 6 — Horizon Protocol 101: A Comprehensive Look at DeFi Derivatives

Wrapped Bitcoin Down More Than 3% Within 24 hours

Join our free newsletter for daily crypto updates!