Summary

The KZG Ceremony is a coordinated public ritual which will provide a cryptographic foundation for Ethereum scaling initiatives. From the specs repo:

The ceremony takes place between participants and the sequencer. Participants are the entities that contribute their secret randomness to the final output 𝜏 s. The role of the sequencer is to act as the common point of interaction for all participants as well as verifying participants' contribution as the ceremony progresses.

The ceremony is designed to have the following characteristics:

• wide ecosystem participation
• browser accessible
• a meaningful narrative in a simple interface
• easy to audit transcript

The best place to follow along is the KZG Ceremony channel in the Ethereum R&D Discord or the bridged telegram channel - DM one of the contributors to be added to either.

Resources

• KZG Ceremony FAQ
• How do trusted setups work?
• EIP-4844
• Proto-Danksharding FAQ
• KZG polynomial commitments
• KZG Ceremony Timeline
• Spec Repo
• Frontend Repo

Audits

• SECBIT Spec + Implementation Audit - Aug 2022
• Sigma Prime Sequencer Audit - Jan 2023

Client Implementations

There are a number of independent implementations interested Ceremony participants can try to run locally, will have a variety of different features. (no guarantees on the quality or completeness!)

CLI Interfaces

Browser Interfaces

1. audit: QmevfvaP3nR5iMncWKa55B2f5mUgTAw9oDjFovD3XNrJTV
2. doge: QmRs83zAU1hEnPHeeSKBUa58kLiWiwkjG3rJCmB8ViTcSU

BLS Libraries

Special Contributions

April 1-16 2023 was the Special Contribution Period for the KZG Ceremony. This allowed participants to contribute in ways that may not have been possible in the Open Contribution period.

While the Ceremony only needs a single honest participant to provide a secure output, Special Contributions provide additional assurances beyond a standard entropy contribution:

• computing over the entropy in an isolated environment (eg. on an airgapped machine, wiping and physically destroying hardware) means it's unlikely for a malicious entity to have extracted the entropy at any point
• detailed documentation (explore links below) attached to real reputations are unlikely to all have been coopted or faked by a malicious coordinating entity. The records are available for future observers to explore.
• different hardware and software limits correlated risk
• differentiated entropy generation (eg. measuring an explosion) prevents the Ceremony output being compromised by some failure in the regular entropy generation (eg. the hosted interface)
• contributions involving large groups of people are harder to fake than those with only one person

This post is a public record of the Special Contributions with information on methodology, where to find them in the transcript, and links to documenting media.

• 00 - Cryptosat
• 01 - The KZG Marble Machine
• 02 - Mr. Moloch's Ephemeral Album II
• 03 - Dog Dinner Dance Dynamics
• 04 - CZG-Keremony - a pure JS KZG ceremony client
• 05 - Improvised Theatre
• 06 - A Calculating Car
• 07 - A noisy city
• 08 - Exothermic Entropy
• 09 - The Sferic Project
• 10 - The Great Belgian Beer Entropy Caper
• 11 - KZGamer - summoning Dankshard with a dice-tower
• 12 - Catropy
• 13 - srsly - an iOS KZG Ceremony client

Media

Public Calls