The 9th BIU Winter School on Cryptography

Zero Knowledge

February 18-21, 2019

School Overview

Zero knowledge is a fundamental tool of cryptography, in both theory and practice. It enables a party to prove an assertion without revealing anything but the fact that it is indeed true. The theory of zero-knowledge proofs has beautiful connections to complexity and is used to prove many basic theoretical results of cryptography. In addition, efficient zero-knowledge proofs have many applications, including efficient secure computation, advanced authentication schemes like anonymous credentials, transaction validation, and more.

In the 9th BIU Winter School on Cryptography, we will study the theory and practice of zero-knowledge proofs. The program will cover definitional issues and constructions. The following topics will be included:

1) Foundations of zero-knowledge: motivation and definitions, zero-knowledge for NP, witness indistinguishability, constant-round arguments and proofs, non-interactive zero-knowledge, the Fiat-Shamir paradigm, lower bounds and limitations, and non-black-box zero-knowledge.

Click here to view photo gallery

2) Sigma protocols

3) MPC in the head

4) Zero knowledge and non-interactive zero-knowledge from Bilinear maps

5) Short zero knowledge: SNARKs and STARKs

The winter school program is designed to teach the topic from its basics up to the latest research. The target audience for the school is graduate students and postdocs in cryptography (we will assume that participants have taken at least one university-level course in cryptography). However, all faculty, undergrads and professionals with the necessary background are welcome. The winter school is open to participants from all over the world; all talks will be in English.

School Lecturers 

  • Eli Ben-Sasson, Technion, Israel
  • Jens Groth, Dfinity Foundation-Zug, Switzerland
  • Carmit Hazay, Bar-Ilan University, Israel
  • Yuval Ishai, Technion, Israel
  • Yehuda Lindell, Bar-Ilan University, Israel
  • Benny Pinkas, Bar-Ilan University, Israel
  • Alon Rosen, IDC Herzliya, Israel
  • Ron Rothblum, Technion, Israel

Additional Information

OrganizersYehuda Lindell and Benny Pinkas Department of Computer Science,  Bar-Ilan University, Israel.

Where: The winter school will take place at the Rayman hall at Kfar Hamaccabiah events & conference center in Ramat Gan

When: Monday, February 18, 2019 to Thursday, February 21, 2019

RegistrationWe are sorry but the maximum number of participants has already been reached, and registration is now closed.

Contact: For any questions or queries, please send an e-mail to:

Hotel: We have arranged a special rate at the Kfar Hamaccabiah Hotel where the conference center is located. The rate is $175 a night for a single room, $195 a night for a double room (with two occupants) and $225 for a triple room (with three occupants). The rate includes breakfast. Hotel reservation form will be available soon.

Sponsorship: This winter school is graciously sponsored by the BIU Center for Research in Applied Cryptography and Cyber Security in conjunction with the Israel National Cyber Bureau in the Prime Minister’s Office, the European Research Council under the European Union’s Seventh Framework Programme (FP/2007-2013) / ERC Grant Agreement n. 615172 (HIPS) and the Alter family.

Program Schedule

The detailed schedule for the winter school can be downloaded here

Monday, February 18 – Part 1- Foundations of ZK

  • Alon Rosen: Introduction to Zero Knowledge  (Slides) (Video)
  • Alon Rosen: Zero Knowledge for All NP  (Slides) (Video)
  • Yehuda Lindell: Proofs of Knowledge  (Slides) (Video)
  • Alon Rosen: Constant-Round Zero-Knowledge Proofs  (Slides) (Video)
  • Alon Rosen: Witness Indistinguishability and Constant-Round Arguments  (Slides) (Video)
  • Ron Rothblum: Non-Interactive Zero-Knowledge  (Slides) (Video)

Tuesday, February 19 – Part 1- Foundations of ZK (cont.) & Part 2-Techniques for Efficient ZK

  • Ron Rothblum:  The Fiat-Shamir Transform  (Slides) (Video)
  • Alon Rosen: Lower Bounds and Limitations on Zero Knowledge  (Slides) (Video)
  • Alon Rosen: Non Black-Box Zero Knowledge (Barak’s Protocol)  (Slides) (Video)
  • Ron Rothblum: New Directions and/or Advanced Topics in the Foundations of ZK  (Slides) (Video)
  • Benny Pinkas: Sigma Protocols (Part 1)  (Slides) (Video)

Wednesday, February 20 – Part 2-Techniques for Efficient ZK (cont.)

  • Benny Pinkas: Sigma Protocols (Part 2)  (Slides) (Video 1) (Video 2)
  • Yuval Ishai: MPC in the Head – Compilers for ZK: an Overview  (Slides) (Video)
  • Carmit Hazay: MPC in the Head – ZK from MPC: Constructions and Applications  (Slides) (Video)
  • Excursion

Thursday, February 21 – Part 2-Techniques for Efficient ZK (cont.)

  • Jens Groth: ZK and NIZK from Bilinear Maps (part 1) (Slids) (Video)
  • Jens Groth: ZK and NIZK from Bilinear Maps (part 2) (Video)
  • Jens Groth: ZK and NIZK from Bilinear Maps (part 3) (Video
  • )
  • Eli Ben-Sasson: Short ZK – SNARKs and STARKs (part 1) (Slides 1, Slides 2, Slides 3, Slides 4) (Video 1, Video 2, Video 3, Video 4)
  • Eli Ben-Sasson: Short ZK – SNARKs and STARKs (part 2)
  • Eli Ben-Sasson: Short ZK – SNARKs and STARKs (part 3)
Posted by