THE BLOG

Notes from the proof side of cryptography.

Explainers, project write-ups, and field notes on zero-knowledge, the math underneath it, and what's shipping across the ecosystem.

ZERO-KNOWLEDGE MATH CRYPTOGRAPHY ZK DEVELOPMENT FORMAL VERIF. POST-QUANTUM
Zero-Knowledge
What Zero-Knowledge Proofs Actually Prove
A plain-language walkthrough of completeness, soundness, and zero-knowledge — the three properties every ZK protocol has to satisfy, with no hand-waving.
Σ
Math
Modular Arithmetic: The Clock Math Behind Every ZK Circuit
Why every cryptographic protocol you'll ever touch secretly runs on clock arithmetic, and how to build the intuition that makes it click.
◆
Cryptography
Hash Functions, Demystified
SHA-256, Poseidon, and why ZK-friendly hashing is a different design problem entirely — a tour of what makes a hash function 'circuit-friendly.'
⬡
ZK Development
Debugging a Circuit That Won't Verify
A field guide to the most common reasons a correct-looking circuit fails verification, from witness mismatches to constraint typos.
⬡
ZK Development
Groth16 vs PLONK vs STARKs: Choosing a Proving System in 2026
Proof size, prover time, trusted setup requirements, and tooling maturity compared head-to-head for teams shipping production ZK today.
Zero-Knowledge
Trusted Setups, Explained Without the Hand-Waving
What a ceremony actually produces, why it matters, and how transparent setups like STARKs sidestep the problem entirely.
◎
Post-Quantum Cryptography
Lattice-Based Cryptography: A Gentle On-Ramp
The shortest-vector problem, why quantum computers don't break it, and how lattices are becoming the backbone of post-quantum standards.
■
News/Ecosystem
This Month in ZK: Ecosystem Roundup
New proving system releases, protocol upgrades, and the research papers worth your weekend reading time.
✓
Formal Verification
Formally Verifying a zkSNARK Circuit, Step by Step
Using proof assistants to mechanically check that a circuit's constraints really do encode the statement you think they encode.
Σ
Math
Elliptic Curves Without the Trauma
Point addition, scalar multiplication, and the discrete log problem — built up visually, one picture at a time.
◎
Post-Quantum Cryptography
NIST's Post-Quantum Standards: What Changes for Developers
ML-KEM, ML-DSA, and SLH-DSA are now standardized — here's what migrating a real system actually involves.
✓
Formal Verification
Why 'Formally Verified' Doesn't Always Mean Bug-Free
A proof assistant checks your spec against your code — it can't check that your spec means what you think it means.