WEBVTT
Kind: captions
Language: en

00:00:00.030 --> 00:00:03.679 align:start position:0%
 
okay<00:00:00.690><c> so</c><00:00:00.750><c> hi</c><00:00:01.319><c> everybody</c><00:00:01.879><c> my</c><00:00:02.879><c> name</c><00:00:03.090><c> is</c><00:00:03.120><c> David</c>

00:00:03.679 --> 00:00:03.689 align:start position:0%
okay so hi everybody my name is David
 

00:00:03.689 --> 00:00:06.590 align:start position:0%
okay so hi everybody my name is David
I'm<00:00:03.840><c> from</c><00:00:04.319><c> orbs</c><00:00:04.859><c> which</c><00:00:05.730><c> is</c><00:00:05.910><c> a</c><00:00:05.940><c> company</c><00:00:06.450><c> based</c>

00:00:06.590 --> 00:00:06.600 align:start position:0%
I'm from orbs which is a company based
 

00:00:06.600 --> 00:00:09.320 align:start position:0%
I'm from orbs which is a company based
in<00:00:06.810><c> Israel</c><00:00:07.200><c> and</c><00:00:07.730><c> I</c><00:00:08.730><c> will</c><00:00:08.970><c> talk</c><00:00:09.090><c> today</c><00:00:09.240><c> about</c>

00:00:09.320 --> 00:00:09.330 align:start position:0%
in Israel and I will talk today about
 

00:00:09.330 --> 00:00:13.209 align:start position:0%
in Israel and I will talk today about
dkg<00:00:09.990><c> distributed</c><00:00:10.440><c> key</c><00:00:10.590><c> generation</c><00:00:12.170><c> so</c><00:00:13.170><c> a</c>

00:00:13.209 --> 00:00:13.219 align:start position:0%
dkg distributed key generation so a
 

00:00:13.219 --> 00:00:15.379 align:start position:0%
dkg distributed key generation so a
choreographic<00:00:14.219><c> primitive</c><00:00:14.790><c> that</c><00:00:14.880><c> we</c><00:00:14.969><c> use</c><00:00:15.150><c> in</c>

00:00:15.379 --> 00:00:15.389 align:start position:0%
choreographic primitive that we use in
 

00:00:15.389 --> 00:00:18.590 align:start position:0%
choreographic primitive that we use in
orbs<00:00:15.870><c> is</c><00:00:16.080><c> their</c><00:00:16.470><c> full</c><00:00:16.619><c> signatures</c><00:00:17.359><c> in</c><00:00:18.359><c> which</c>

00:00:18.590 --> 00:00:18.600 align:start position:0%
orbs is their full signatures in which
 

00:00:18.600 --> 00:00:20.990 align:start position:0%
orbs is their full signatures in which
so<00:00:19.109><c> in</c><00:00:19.230><c> a</c><00:00:19.529><c> circle</c><00:00:19.830><c> threshold</c><00:00:20.550><c> the</c><00:00:20.640><c> signature</c>

00:00:20.990 --> 00:00:21.000 align:start position:0%
so in a circle threshold the signature
 

00:00:21.000 --> 00:00:23.509 align:start position:0%
so in a circle threshold the signature
scheme<00:00:21.240><c> you</c><00:00:21.330><c> have</c><00:00:21.359><c> and</c><00:00:21.840><c> participants</c><00:00:22.650><c> and</c><00:00:22.830><c> any</c>

00:00:23.509 --> 00:00:23.519 align:start position:0%
scheme you have and participants and any
 

00:00:23.519 --> 00:00:25.730 align:start position:0%
scheme you have and participants and any
large<00:00:24.210><c> enough</c><00:00:24.449><c> subset</c><00:00:24.960><c> should</c><00:00:25.199><c> be</c><00:00:25.320><c> able</c><00:00:25.590><c> to</c>

00:00:25.730 --> 00:00:25.740 align:start position:0%
large enough subset should be able to
 

00:00:25.740 --> 00:00:28.870 align:start position:0%
large enough subset should be able to
produce<00:00:25.949><c> a</c><00:00:26.310><c> valid</c><00:00:26.699><c> signature</c><00:00:27.119><c> but</c><00:00:27.960><c> a</c><00:00:27.990><c> small</c>

00:00:28.870 --> 00:00:28.880 align:start position:0%
produce a valid signature but a small
 

00:00:28.880 --> 00:00:31.009 align:start position:0%
produce a valid signature but a small
subset<00:00:29.880><c> of</c><00:00:29.910><c> the</c><00:00:30.029><c> participants</c><00:00:30.599><c> should</c><00:00:30.720><c> not</c><00:00:30.840><c> be</c>

00:00:31.009 --> 00:00:31.019 align:start position:0%
subset of the participants should not be
 

00:00:31.019 --> 00:00:33.889 align:start position:0%
subset of the participants should not be
able<00:00:31.170><c> to</c><00:00:31.550><c> produce</c><00:00:32.550><c> a</c><00:00:32.790><c> valid</c><00:00:33.090><c> signature</c><00:00:33.360><c> and</c>

00:00:33.889 --> 00:00:33.899 align:start position:0%
able to produce a valid signature and
 

00:00:33.899 --> 00:00:35.389 align:start position:0%
able to produce a valid signature and
this<00:00:34.260><c> is</c><00:00:34.350><c> quite</c><00:00:34.530><c> similar</c><00:00:34.739><c> to</c><00:00:34.920><c> a</c><00:00:35.070><c> multi</c>

00:00:35.389 --> 00:00:35.399 align:start position:0%
this is quite similar to a multi
 

00:00:35.399 --> 00:00:38.240 align:start position:0%
this is quite similar to a multi
signature<00:00:35.790><c> but</c><00:00:35.969><c> not</c><00:00:36.210><c> just</c><00:00:36.480><c> quite</c><00:00:37.250><c> right</c>

00:00:38.240 --> 00:00:38.250 align:start position:0%
signature but not just quite right
 

00:00:38.250 --> 00:00:42.560 align:start position:0%
signature but not just quite right
because<00:00:38.430><c> we</c><00:00:38.640><c> have</c><00:00:38.760><c> a</c><00:00:38.790><c> 1:1</c><00:00:39.750><c> signature</c><00:00:40.700><c> so</c><00:00:41.700><c> as</c>

00:00:42.560 --> 00:00:42.570 align:start position:0%
because we have a 1:1 signature so as
 

00:00:42.570 --> 00:00:45.680 align:start position:0%
because we have a 1:1 signature so as
you<00:00:43.020><c> can</c><00:00:43.140><c> probably</c><00:00:43.200><c> understand</c><00:00:44.270><c> if</c><00:00:45.270><c> you</c><00:00:45.480><c> want</c>

00:00:45.680 --> 00:00:45.690 align:start position:0%
you can probably understand if you want
 

00:00:45.690 --> 00:00:49.459 align:start position:0%
you can probably understand if you want
to<00:00:45.780><c> have</c><00:00:46.020><c> such</c><00:00:46.890><c> a</c><00:00:46.920><c> chromatic</c><00:00:47.789><c> such</c><00:00:48.600><c> a</c><00:00:48.629><c> scheme</c>

00:00:49.459 --> 00:00:49.469 align:start position:0%
to have such a chromatic such a scheme
 

00:00:49.469 --> 00:00:51.979 align:start position:0%
to have such a chromatic such a scheme
you<00:00:50.100><c> need</c><00:00:50.309><c> the</c><00:00:50.520><c> participants</c><00:00:51.270><c> keys</c><00:00:51.510><c> to</c><00:00:51.809><c> be</c>

00:00:51.979 --> 00:00:51.989 align:start position:0%
you need the participants keys to be
 

00:00:51.989 --> 00:00:53.990 align:start position:0%
you need the participants keys to be
related<00:00:52.710><c> mathematically</c><00:00:53.280><c> so</c><00:00:53.879><c> the</c>

00:00:53.990 --> 00:00:54.000 align:start position:0%
related mathematically so the
 

00:00:54.000 --> 00:00:56.810 align:start position:0%
related mathematically so the
participants<00:00:54.570><c> cannot</c><00:00:54.750><c> just</c><00:00:55.640><c> generate</c><00:00:56.640><c> their</c>

00:00:56.810 --> 00:00:56.820 align:start position:0%
participants cannot just generate their
 

00:00:56.820 --> 00:00:58.430 align:start position:0%
participants cannot just generate their
keys<00:00:56.969><c> locally</c><00:00:57.390><c> and</c><00:00:57.480><c> expect</c><00:00:57.840><c> them</c><00:00:57.960><c> to</c><00:00:58.109><c> somehow</c>

00:00:58.430 --> 00:00:58.440 align:start position:0%
keys locally and expect them to somehow
 

00:00:58.440 --> 00:01:01.400 align:start position:0%
keys locally and expect them to somehow
work<00:00:58.710><c> together</c><00:00:58.969><c> so</c><00:00:59.969><c> option</c><00:01:00.239><c> a</c><00:01:00.390><c> that</c><00:01:00.989><c> the</c><00:01:01.289><c> way</c>

00:01:01.400 --> 00:01:01.410 align:start position:0%
work together so option a that the way
 

00:01:01.410 --> 00:01:04.399 align:start position:0%
work together so option a that the way
to<00:01:01.469><c> address</c><00:01:01.829><c> this</c><00:01:02.039><c> is</c><00:01:02.100><c> to</c><00:01:02.280><c> use</c><00:01:02.609><c> a</c><00:01:03.409><c> trusted</c>

00:01:04.399 --> 00:01:04.409 align:start position:0%
to address this is to use a trusted
 

00:01:04.409 --> 00:01:06.080 align:start position:0%
to address this is to use a trusted
dealer<00:01:04.830><c> that</c><00:01:05.010><c> would</c><00:01:05.280><c> distribute</c><00:01:05.580><c> the</c><00:01:05.820><c> keys</c><00:01:05.970><c> to</c>

00:01:06.080 --> 00:01:06.090 align:start position:0%
dealer that would distribute the keys to
 

00:01:06.090 --> 00:01:08.350 align:start position:0%
dealer that would distribute the keys to
the<00:01:06.180><c> participants</c><00:01:06.840><c> but</c><00:01:07.380><c> of</c><00:01:07.500><c> course</c><00:01:07.710><c> in</c><00:01:07.920><c> a</c>

00:01:08.350 --> 00:01:08.360 align:start position:0%
the participants but of course in a
 

00:01:08.360 --> 00:01:10.820 align:start position:0%
the participants but of course in a
decentralized<00:01:09.360><c> environment</c><00:01:10.170><c> that</c><00:01:10.409><c> would</c><00:01:10.590><c> not</c>

00:01:10.820 --> 00:01:10.830 align:start position:0%
decentralized environment that would not
 

00:01:10.830 --> 00:01:13.670 align:start position:0%
decentralized environment that would not
be<00:01:11.070><c> desired</c><00:01:11.700><c> right</c><00:01:12.000><c> you</c><00:01:12.180><c> don't</c><00:01:12.360><c> want</c><00:01:12.570><c> a</c><00:01:12.689><c> single</c>

00:01:13.670 --> 00:01:13.680 align:start position:0%
be desired right you don't want a single
 

00:01:13.680 --> 00:01:16.670 align:start position:0%
be desired right you don't want a single
entity<00:01:14.460><c> to</c><00:01:14.700><c> know</c><00:01:14.790><c> everything</c><00:01:15.210><c> so</c><00:01:15.560><c> what</c><00:01:16.560><c> you</c>

00:01:16.670 --> 00:01:16.680 align:start position:0%
entity to know everything so what you
 

00:01:16.680 --> 00:01:18.440 align:start position:0%
entity to know everything so what you
can<00:01:16.860><c> do</c><00:01:16.950><c> is</c><00:01:17.070><c> you</c><00:01:17.189><c> can</c><00:01:17.369><c> use</c><00:01:17.400><c> a</c><00:01:17.610><c> distributed</c><00:01:18.060><c> key</c>

00:01:18.440 --> 00:01:18.450 align:start position:0%
can do is you can use a distributed key
 

00:01:18.450 --> 00:01:22.660 align:start position:0%
can do is you can use a distributed key
generation<00:01:18.810><c> protocol</c><00:01:19.640><c> which</c><00:01:20.640><c> would</c><00:01:20.850><c> indeed</c>

00:01:22.660 --> 00:01:22.670 align:start position:0%
generation protocol which would indeed
 

00:01:22.670 --> 00:01:25.520 align:start position:0%
generation protocol which would indeed
you<00:01:23.670><c> know</c><00:01:23.700><c> reduce</c><00:01:24.119><c> the</c><00:01:24.299><c> need</c><00:01:24.509><c> of</c><00:01:24.540><c> a</c><00:01:25.080><c> trusted</c>

00:01:25.520 --> 00:01:25.530 align:start position:0%
you know reduce the need of a trusted
 

00:01:25.530 --> 00:01:27.890 align:start position:0%
you know reduce the need of a trusted
dealer<00:01:25.820><c> but</c><00:01:26.820><c> it</c><00:01:27.000><c> would</c><00:01:27.210><c> introduce</c><00:01:27.540><c> some</c>

00:01:27.890 --> 00:01:27.900 align:start position:0%
dealer but it would introduce some
 

00:01:27.900 --> 00:01:31.249 align:start position:0%
dealer but it would introduce some
challenges<00:01:28.439><c> so</c><00:01:29.159><c> first</c><00:01:30.060><c> of</c><00:01:30.210><c> all</c><00:01:30.360><c> a</c><00:01:30.840><c> lot</c><00:01:31.170><c> of</c>

00:01:31.249 --> 00:01:31.259 align:start position:0%
challenges so first of all a lot of
 

00:01:31.259 --> 00:01:33.170 align:start position:0%
challenges so first of all a lot of
communication<00:01:31.920><c> right</c><00:01:32.100><c> all</c><00:01:32.369><c> the</c><00:01:32.670><c> participants</c>

00:01:33.170 --> 00:01:33.180 align:start position:0%
communication right all the participants
 

00:01:33.180 --> 00:01:34.999 align:start position:0%
communication right all the participants
are<00:01:33.360><c> going</c><00:01:33.509><c> to</c><00:01:33.630><c> have</c><00:01:33.750><c> to</c><00:01:33.930><c> communicate</c><00:01:34.619><c> with</c>

00:01:34.999 --> 00:01:35.009 align:start position:0%
are going to have to communicate with
 

00:01:35.009 --> 00:01:37.490 align:start position:0%
are going to have to communicate with
all<00:01:35.310><c> the</c><00:01:35.430><c> participants</c><00:01:35.780><c> so</c><00:01:36.780><c> this</c><00:01:37.380><c> is</c>

00:01:37.490 --> 00:01:37.500 align:start position:0%
all the participants so this is
 

00:01:37.500 --> 00:01:39.950 align:start position:0%
all the participants so this is
expensive<00:01:37.979><c> and</c><00:01:38.130><c> then</c><00:01:38.840><c> computationally</c><00:01:39.840><c> it's</c>

00:01:39.950 --> 00:01:39.960 align:start position:0%
expensive and then computationally it's
 

00:01:39.960 --> 00:01:41.539 align:start position:0%
expensive and then computationally it's
going<00:01:40.170><c> to</c><00:01:40.259><c> be</c><00:01:40.409><c> hard</c><00:01:40.619><c> on</c><00:01:40.740><c> participants</c><00:01:41.369><c> they're</c>

00:01:41.539 --> 00:01:41.549 align:start position:0%
going to be hard on participants they're
 

00:01:41.549 --> 00:01:43.490 align:start position:0%
going to be hard on participants they're
going<00:01:41.700><c> to</c><00:01:41.820><c> have</c><00:01:41.939><c> to</c><00:01:42.090><c> run</c><00:01:42.180><c> many</c><00:01:42.810><c> computations</c>

00:01:43.490 --> 00:01:43.500 align:start position:0%
going to have to run many computations
 

00:01:43.500 --> 00:01:44.740 align:start position:0%
going to have to run many computations
to<00:01:43.560><c> validate</c><00:01:43.950><c> that</c><00:01:44.070><c> everything</c><00:01:44.430><c> is</c><00:01:44.549><c> correct</c>

00:01:44.740 --> 00:01:44.750 align:start position:0%
to validate that everything is correct
 

00:01:44.750 --> 00:01:47.569 align:start position:0%
to validate that everything is correct
and<00:01:45.750><c> then</c><00:01:46.560><c> there's</c><00:01:46.740><c> still</c><00:01:46.950><c> this</c><00:01:47.100><c> trust</c>

00:01:47.569 --> 00:01:47.579 align:start position:0%
and then there's still this trust
 

00:01:47.579 --> 00:01:50.719 align:start position:0%
and then there's still this trust
assumption<00:01:48.149><c> where</c><00:01:48.299><c> we're</c><00:01:48.950><c> trusting</c><00:01:49.950><c> that</c><00:01:50.250><c> the</c>

00:01:50.719 --> 00:01:50.729 align:start position:0%
assumption where we're trusting that the
 

00:01:50.729 --> 00:01:52.190 align:start position:0%
assumption where we're trusting that the
majority<00:01:51.210><c> of</c><00:01:51.240><c> the</c><00:01:51.390><c> participants</c><00:01:52.079><c> are</c>

00:01:52.190 --> 00:01:52.200 align:start position:0%
majority of the participants are
 

00:01:52.200 --> 00:01:55.249 align:start position:0%
majority of the participants are
following<00:01:52.500><c> the</c><00:01:52.740><c> protocol</c><00:01:53.220><c> correctly</c><00:01:54.049><c> and</c><00:01:55.049><c> if</c>

00:01:55.249 --> 00:01:55.259 align:start position:0%
following the protocol correctly and if
 

00:01:55.259 --> 00:01:57.410 align:start position:0%
following the protocol correctly and if
this<00:01:55.500><c> assumption</c><00:01:56.100><c> breaks</c><00:01:56.490><c> then</c><00:01:56.729><c> the</c><00:01:56.969><c> protocol</c>

00:01:57.410 --> 00:01:57.420 align:start position:0%
this assumption breaks then the protocol
 

00:01:57.420 --> 00:02:02.090 align:start position:0%
this assumption breaks then the protocol
breaks<00:01:58.909><c> so</c><00:02:00.020><c> we're</c><00:02:01.020><c> going</c><00:02:01.259><c> to</c><00:02:01.409><c> use</c><00:02:01.560><c> the</c><00:02:01.770><c> theorem</c>

00:02:02.090 --> 00:02:02.100 align:start position:0%
breaks so we're going to use the theorem
 

00:02:02.100 --> 00:02:05.209 align:start position:0%
breaks so we're going to use the theorem
in<00:02:02.939><c> order</c><00:02:03.299><c> to</c><00:02:03.540><c> kind</c><00:02:03.750><c> of</c><00:02:03.930><c> justify</c><00:02:04.649><c> or</c><00:02:04.860><c> relax</c>

00:02:05.209 --> 00:02:05.219 align:start position:0%
in order to kind of justify or relax
 

00:02:05.219 --> 00:02:06.709 align:start position:0%
in order to kind of justify or relax
this<00:02:05.430><c> is</c><00:02:05.610><c> not</c><00:02:05.790><c> this</c><00:02:06.000><c> is</c><00:02:06.149><c> something</c><00:02:06.450><c> in</c><00:02:06.540><c> red</c>

00:02:06.709 --> 00:02:06.719 align:start position:0%
this is not this is something in red
 

00:02:06.719 --> 00:02:08.900 align:start position:0%
this is not this is something in red
that's<00:02:07.530><c> the</c><00:02:07.799><c> main</c><00:02:07.950><c> purpose</c><00:02:08.160><c> of</c><00:02:08.489><c> using</c><00:02:08.849><c> a</c>

00:02:08.900 --> 00:02:08.910 align:start position:0%
that's the main purpose of using a
 

00:02:08.910 --> 00:02:12.260 align:start position:0%
that's the main purpose of using a
theorem<00:02:10.129><c> so</c>

00:02:12.260 --> 00:02:12.270 align:start position:0%
theorem so
 

00:02:12.270 --> 00:02:15.170 align:start position:0%
theorem so
how<00:02:12.690><c> is</c><00:02:12.840><c> it</c><00:02:12.870><c> going</c><00:02:13.110><c> to</c><00:02:13.320><c> work</c><00:02:13.760><c> basically</c><00:02:14.760><c> it's</c>

00:02:15.170 --> 00:02:15.180 align:start position:0%
how is it going to work basically it's
 

00:02:15.180 --> 00:02:17.270 align:start position:0%
how is it going to work basically it's
going<00:02:15.360><c> to</c><00:02:15.540><c> be</c><00:02:15.690><c> a</c><00:02:15.720><c> smart</c><00:02:16.320><c> contract</c><00:02:16.530><c> right</c><00:02:16.950><c> adapt</c>

00:02:17.270 --> 00:02:17.280 align:start position:0%
going to be a smart contract right adapt
 

00:02:17.280 --> 00:02:20.840 align:start position:0%
going to be a smart contract right adapt
that<00:02:18.060><c> does</c><00:02:18.300><c> the</c><00:02:18.480><c> dkg</c><00:02:19.020><c> and</c><00:02:19.410><c> the</c><00:02:20.220><c> participants</c>

00:02:20.840 --> 00:02:20.850 align:start position:0%
that does the dkg and the participants
 

00:02:20.850 --> 00:02:22.550 align:start position:0%
that does the dkg and the participants
are<00:02:20.970><c> going</c><00:02:21.060><c> to</c><00:02:21.270><c> start</c><00:02:21.600><c> by</c><00:02:21.810><c> enrolling</c><00:02:22.170><c> to</c><00:02:22.440><c> the</c>

00:02:22.550 --> 00:02:22.560 align:start position:0%
are going to start by enrolling to the
 

00:02:22.560 --> 00:02:24.440 align:start position:0%
are going to start by enrolling to the
smart<00:02:22.830><c> contract</c><00:02:23.010><c> they're</c><00:02:23.370><c> going</c><00:02:23.550><c> to</c><00:02:23.670><c> send</c><00:02:24.360><c> a</c>

00:02:24.440 --> 00:02:24.450 align:start position:0%
smart contract they're going to send a
 

00:02:24.450 --> 00:02:27.050 align:start position:0%
smart contract they're going to send a
deposit<00:02:24.990><c> and</c><00:02:25.170><c> then</c><00:02:25.860><c> they're</c><00:02:26.160><c> formally</c><00:02:26.850><c> a</c><00:02:26.970><c> part</c>

00:02:27.050 --> 00:02:27.060 align:start position:0%
deposit and then they're formally a part
 

00:02:27.060 --> 00:02:30.680 align:start position:0%
deposit and then they're formally a part
of<00:02:27.360><c> this</c><00:02:27.450><c> dkg</c><00:02:28.250><c> and</c><00:02:29.250><c> after</c><00:02:29.880><c> this</c><00:02:30.060><c> is</c><00:02:30.210><c> over</c><00:02:30.240><c> they</c>

00:02:30.680 --> 00:02:30.690 align:start position:0%
of this dkg and after this is over they
 

00:02:30.690 --> 00:02:34.370 align:start position:0%
of this dkg and after this is over they
the<00:02:31.020><c> actual</c><00:02:31.650><c> dkg</c><00:02:32.130><c> can</c><00:02:32.550><c> start</c><00:02:33.170><c> the</c><00:02:34.170><c> first</c>

00:02:34.370 --> 00:02:34.380 align:start position:0%
the actual dkg can start the first
 

00:02:34.380 --> 00:02:35.660 align:start position:0%
the actual dkg can start the first
communication<00:02:34.950><c> they're</c><00:02:35.370><c> going</c><00:02:35.550><c> to</c>

00:02:35.660 --> 00:02:35.670 align:start position:0%
communication they're going to
 

00:02:35.670 --> 00:02:38.330 align:start position:0%
communication they're going to
communicate<00:02:36.120><c> by</c><00:02:36.530><c> sending</c><00:02:37.530><c> transactions</c><00:02:38.160><c> to</c>

00:02:38.330 --> 00:02:38.340 align:start position:0%
communicate by sending transactions to
 

00:02:38.340 --> 00:02:39.620 align:start position:0%
communicate by sending transactions to
the<00:02:38.430><c> smart</c><00:02:38.700><c> contract</c><00:02:38.880><c> which</c><00:02:39.270><c> would</c><00:02:39.480><c> basically</c>

00:02:39.620 --> 00:02:39.630 align:start position:0%
the smart contract which would basically
 

00:02:39.630 --> 00:02:41.000 align:start position:0%
the smart contract which would basically
be<00:02:39.990><c> data</c><00:02:40.260><c> that</c><00:02:40.380><c> they're</c><00:02:40.650><c> trying</c><00:02:40.920><c> to</c>

00:02:41.000 --> 00:02:41.010 align:start position:0%
be data that they're trying to
 

00:02:41.010 --> 00:02:43.460 align:start position:0%
be data that they're trying to
distribute<00:02:41.790><c> between</c><00:02:42.780><c> one</c><00:02:42.930><c> another</c><00:02:43.230><c> and</c><00:02:43.380><c> this</c>

00:02:43.460 --> 00:02:43.470 align:start position:0%
distribute between one another and this
 

00:02:43.470 --> 00:02:44.960 align:start position:0%
distribute between one another and this
could<00:02:43.650><c> be</c><00:02:43.740><c> public</c><00:02:44.070><c> information</c><00:02:44.190><c> available</c>

00:02:44.960 --> 00:02:44.970 align:start position:0%
could be public information available
 

00:02:44.970 --> 00:02:47.870 align:start position:0%
could be public information available
for<00:02:45.180><c> everybody</c><00:02:45.570><c> or</c><00:02:46.350><c> private</c><00:02:47.310><c> information</c>

00:02:47.870 --> 00:02:47.880 align:start position:0%
for everybody or private information
 

00:02:47.880 --> 00:02:49.160 align:start position:0%
for everybody or private information
that<00:02:48.000><c> is</c><00:02:48.120><c> destined</c><00:02:48.540><c> to</c><00:02:48.570><c> a</c><00:02:48.690><c> specific</c>

00:02:49.160 --> 00:02:49.170 align:start position:0%
that is destined to a specific
 

00:02:49.170 --> 00:02:50.690 align:start position:0%
that is destined to a specific
participant<00:02:49.740><c> and</c><00:02:49.860><c> then</c><00:02:49.950><c> they</c><00:02:50.130><c> just</c><00:02:50.340><c> encrypt</c>

00:02:50.690 --> 00:02:50.700 align:start position:0%
participant and then they just encrypt
 

00:02:50.700 --> 00:02:54.320 align:start position:0%
participant and then they just encrypt
their<00:02:50.940><c> data</c><00:02:52.550><c> after</c><00:02:53.550><c> the</c><00:02:53.640><c> communication</c><00:02:54.240><c> is</c>

00:02:54.320 --> 00:02:54.330 align:start position:0%
their data after the communication is
 

00:02:54.330 --> 00:02:56.180 align:start position:0%
their data after the communication is
over<00:02:54.600><c> they</c><00:02:54.750><c> the</c><00:02:55.080><c> participants</c><00:02:55.680><c> are</c><00:02:55.800><c> going</c><00:02:56.010><c> to</c>

00:02:56.180 --> 00:02:56.190 align:start position:0%
over they the participants are going to
 

00:02:56.190 --> 00:02:58.550 align:start position:0%
over they the participants are going to
execute<00:02:56.520><c> local</c><00:02:57.210><c> computations</c><00:02:57.840><c> and</c><00:02:58.320><c> then</c><00:02:58.470><c> if</c>

00:02:58.550 --> 00:02:58.560 align:start position:0%
execute local computations and then if
 

00:02:58.560 --> 00:02:59.450 align:start position:0%
execute local computations and then if
everything<00:02:58.830><c> is</c><00:02:59.100><c> fine</c>

00:02:59.450 --> 00:02:59.460 align:start position:0%
everything is fine
 

00:02:59.460 --> 00:03:02.480 align:start position:0%
everything is fine
and<00:02:59.940><c> basically</c><00:03:00.540><c> the</c><00:03:00.840><c> dkg</c><00:03:01.290><c> is</c><00:03:01.410><c> over</c><00:03:01.710><c> okay</c><00:03:02.340><c> and</c>

00:03:02.480 --> 00:03:02.490 align:start position:0%
and basically the dkg is over okay and
 

00:03:02.490 --> 00:03:04.820 align:start position:0%
and basically the dkg is over okay and
everybody<00:03:02.990><c> every</c><00:03:03.990><c> participant</c><00:03:04.410><c> has</c><00:03:04.590><c> their</c>

00:03:04.820 --> 00:03:04.830 align:start position:0%
everybody every participant has their
 

00:03:04.830 --> 00:03:07.760 align:start position:0%
everybody every participant has their
keys<00:03:05.040><c> in'</c><00:03:05.190><c> and</c><00:03:05.400><c> it's</c><00:03:05.670><c> good</c><00:03:06.060><c> to</c><00:03:06.180><c> go</c><00:03:06.330><c> over</c><00:03:06.770><c> if</c>

00:03:07.760 --> 00:03:07.770 align:start position:0%
keys in' and it's good to go over if
 

00:03:07.770 --> 00:03:11.120 align:start position:0%
keys in' and it's good to go over if
there's<00:03:07.890><c> a</c><00:03:08.010><c> problem</c><00:03:09.290><c> then</c><00:03:10.290><c> any</c><00:03:10.560><c> participant</c>

00:03:11.120 --> 00:03:11.130 align:start position:0%
there's a problem then any participant
 

00:03:11.130 --> 00:03:12.500 align:start position:0%
there's a problem then any participant
that<00:03:11.280><c> detects</c><00:03:11.640><c> a</c><00:03:11.730><c> problem</c><00:03:12.120><c> with</c><00:03:12.270><c> another</c>

00:03:12.500 --> 00:03:12.510 align:start position:0%
that detects a problem with another
 

00:03:12.510 --> 00:03:14.260 align:start position:0%
that detects a problem with another
participant<00:03:13.020><c> state</c><00:03:13.290><c> that</c><00:03:13.440><c> they</c><00:03:13.560><c> can</c>

00:03:14.260 --> 00:03:14.270 align:start position:0%
participant state that they can
 

00:03:14.270 --> 00:03:17.150 align:start position:0%
participant state that they can
basically<00:03:15.590><c> complain</c><00:03:16.590><c> they</c><00:03:16.770><c> can</c><00:03:16.950><c> file</c><00:03:17.130><c> a</c>

00:03:17.150 --> 00:03:17.160 align:start position:0%
basically complain they can file a
 

00:03:17.160 --> 00:03:19.010 align:start position:0%
basically complain they can file a
complaint<00:03:17.550><c> to</c><00:03:17.610><c> the</c><00:03:17.700><c> smart</c><00:03:18.030><c> contract</c><00:03:18.210><c> which</c>

00:03:19.010 --> 00:03:19.020 align:start position:0%
complaint to the smart contract which
 

00:03:19.020 --> 00:03:22.240 align:start position:0%
complaint to the smart contract which
would<00:03:19.200><c> then</c><00:03:19.340><c> re-execute</c><00:03:20.340><c> the</c><00:03:20.790><c> reported</c>

00:03:22.240 --> 00:03:22.250 align:start position:0%
would then re-execute the reported
 

00:03:22.250 --> 00:03:25.010 align:start position:0%
would then re-execute the reported
computation<00:03:23.250><c> and</c><00:03:23.430><c> would</c><00:03:24.150><c> find</c><00:03:24.600><c> whoever</c><00:03:24.900><c> is</c>

00:03:25.010 --> 00:03:25.020 align:start position:0%
computation and would find whoever is
 

00:03:25.020 --> 00:03:27.740 align:start position:0%
computation and would find whoever is
faulty<00:03:25.530><c> and</c><00:03:26.100><c> would</c><00:03:26.640><c> slash</c><00:03:26.910><c> that</c><00:03:27.150><c> participant</c>

00:03:27.740 --> 00:03:27.750 align:start position:0%
faulty and would slash that participant
 

00:03:27.750 --> 00:03:30.860 align:start position:0%
faulty and would slash that participant
okay<00:03:28.680><c> so</c><00:03:29.460><c> what</c><00:03:29.610><c> we</c><00:03:29.760><c> were</c><00:03:29.910><c> able</c><00:03:30.000><c> to</c><00:03:30.360><c> do</c><00:03:30.510><c> is</c><00:03:30.690><c> we're</c>

00:03:30.860 --> 00:03:30.870 align:start position:0%
okay so what we were able to do is we're
 

00:03:30.870 --> 00:03:35.270 align:start position:0%
okay so what we were able to do is we're
able<00:03:31.140><c> to</c><00:03:31.800><c> find</c><00:03:32.730><c> valid</c><00:03:33.390><c> complaints</c><00:03:34.050><c> for</c><00:03:34.800><c> every</c>

00:03:35.270 --> 00:03:35.280 align:start position:0%
able to find valid complaints for every
 

00:03:35.280 --> 00:03:38.030 align:start position:0%
able to find valid complaints for every
way<00:03:35.490><c> that</c><00:03:35.700><c> a</c><00:03:35.730><c> participant</c><00:03:36.360><c> can</c><00:03:36.770><c> divert</c><00:03:37.770><c> from</c>

00:03:38.030 --> 00:03:38.040 align:start position:0%
way that a participant can divert from
 

00:03:38.040 --> 00:03:40.190 align:start position:0%
way that a participant can divert from
the<00:03:38.390><c> instructions</c><00:03:39.390><c> from</c><00:03:39.630><c> the</c><00:03:39.780><c> original</c>

00:03:40.190 --> 00:03:40.200 align:start position:0%
the instructions from the original
 

00:03:40.200 --> 00:03:43.190 align:start position:0%
the instructions from the original
instructions<00:03:40.590><c> of</c><00:03:40.890><c> the</c><00:03:40.980><c> protocol</c><00:03:41.340><c> and</c><00:03:42.200><c> what</c>

00:03:43.190 --> 00:03:43.200 align:start position:0%
instructions of the protocol and what
 

00:03:43.200 --> 00:03:44.750 align:start position:0%
instructions of the protocol and what
this<00:03:43.380><c> means</c><00:03:43.680><c> is</c><00:03:43.950><c> that</c><00:03:43.980><c> if</c><00:03:44.430><c> you're</c><00:03:44.700><c> a</c>

00:03:44.750 --> 00:03:44.760 align:start position:0%
this means is that if you're a
 

00:03:44.760 --> 00:03:46.100 align:start position:0%
this means is that if you're a
participant<00:03:45.300><c> and</c><00:03:45.480><c> you</c><00:03:45.540><c> care</c><00:03:45.780><c> about</c><00:03:45.990><c> the</c>

00:03:46.100 --> 00:03:46.110 align:start position:0%
participant and you care about the
 

00:03:46.110 --> 00:03:48.590 align:start position:0%
participant and you care about the
deposit<00:03:46.620><c> that</c><00:03:46.800><c> you</c><00:03:47.160><c> put</c><00:03:47.400><c> you</c><00:03:48.030><c> would</c><00:03:48.150><c> have</c><00:03:48.360><c> to</c>

00:03:48.590 --> 00:03:48.600 align:start position:0%
deposit that you put you would have to
 

00:03:48.600 --> 00:03:50.150 align:start position:0%
deposit that you put you would have to
follow<00:03:48.900><c> the</c><00:03:49.170><c> protocol</c><00:03:49.620><c> instructions</c>

00:03:50.150 --> 00:03:50.160 align:start position:0%
follow the protocol instructions
 

00:03:50.160 --> 00:03:52.400 align:start position:0%
follow the protocol instructions
correctly<00:03:50.580><c> or</c><00:03:50.700><c> else</c><00:03:50.960><c> you're</c><00:03:51.960><c> going</c><00:03:52.170><c> to</c><00:03:52.260><c> be</c>

00:03:52.400 --> 00:03:52.410 align:start position:0%
correctly or else you're going to be
 

00:03:52.410 --> 00:03:55.010 align:start position:0%
correctly or else you're going to be
complaining<00:03:52.920><c> against</c><00:03:53.370><c> and</c><00:03:53.550><c> slashed</c><00:03:54.030><c> okay</c><00:03:54.960><c> so</c>

00:03:55.010 --> 00:03:55.020 align:start position:0%
complaining against and slashed okay so
 

00:03:55.020 --> 00:03:57.710 align:start position:0%
complaining against and slashed okay so
this<00:03:55.170><c> is</c><00:03:55.320><c> exactly</c><00:03:55.620><c> what</c><00:03:55.800><c> we</c><00:03:55.890><c> wanted</c><00:03:56.570><c> which</c><00:03:57.570><c> is</c>

00:03:57.710 --> 00:03:57.720 align:start position:0%
this is exactly what we wanted which is
 

00:03:57.720 --> 00:04:02.320 align:start position:0%
this is exactly what we wanted which is
great<00:03:58.580><c> but</c><00:03:59.580><c> let</c><00:04:00.060><c> me</c><00:04:00.150><c> just</c><00:04:00.390><c> finish</c><00:04:00.900><c> up</c><00:04:01.200><c> by</c>

00:04:02.320 --> 00:04:02.330 align:start position:0%
great but let me just finish up by
 

00:04:02.330 --> 00:04:05.450 align:start position:0%
great but let me just finish up by
giving<00:04:03.330><c> you</c><00:04:03.450><c> a</c><00:04:03.510><c> taste</c><00:04:04.050><c> as</c><00:04:04.440><c> to</c><00:04:04.590><c> how</c><00:04:04.740><c> we</c><00:04:04.800><c> actually</c>

00:04:05.450 --> 00:04:05.460 align:start position:0%
giving you a taste as to how we actually
 

00:04:05.460 --> 00:04:07.310 align:start position:0%
giving you a taste as to how we actually
solve<00:04:05.940><c> the</c><00:04:06.090><c> technical</c><00:04:06.240><c> problems</c><00:04:06.930><c> because</c><00:04:07.230><c> the</c>

00:04:07.310 --> 00:04:07.320 align:start position:0%
solve the technical problems because the
 

00:04:07.320 --> 00:04:10.160 align:start position:0%
solve the technical problems because the
dick<00:04:07.440><c> ages</c><00:04:07.710><c> is</c><00:04:07.980><c> very</c><00:04:08.810><c> computation</c><00:04:09.810><c> and</c>

00:04:10.160 --> 00:04:10.170 align:start position:0%
dick ages is very computation and
 

00:04:10.170 --> 00:04:12.020 align:start position:0%
dick ages is very computation and
communication<00:04:10.440><c> and</c><00:04:11.100><c> expensive</c><00:04:11.610><c> as</c><00:04:11.730><c> I</c><00:04:11.850><c> said</c>

00:04:12.020 --> 00:04:12.030 align:start position:0%
communication and expensive as I said
 

00:04:12.030 --> 00:04:14.510 align:start position:0%
communication and expensive as I said
before<00:04:12.260><c> so</c><00:04:13.260><c> first</c><00:04:13.470><c> so</c><00:04:13.770><c> our</c><00:04:14.070><c> general</c><00:04:14.430><c> approach</c>

00:04:14.510 --> 00:04:14.520 align:start position:0%
before so first so our general approach
 

00:04:14.520 --> 00:04:16.970 align:start position:0%
before so first so our general approach
is<00:04:14.700><c> to</c><00:04:14.940><c> do</c><00:04:15.030><c> as</c><00:04:15.390><c> much</c><00:04:15.660><c> as</c><00:04:15.690><c> we</c><00:04:15.870><c> can</c><00:04:16.080><c> off</c><00:04:16.260><c> chain</c><00:04:16.560><c> so</c>

00:04:16.970 --> 00:04:16.980 align:start position:0%
is to do as much as we can off chain so
 

00:04:16.980 --> 00:04:19.729 align:start position:0%
is to do as much as we can off chain so
what<00:04:17.100><c> does</c><00:04:17.220><c> that</c><00:04:17.250><c> mean</c><00:04:18.140><c> so</c><00:04:19.140><c> in</c><00:04:19.290><c> terms</c><00:04:19.650><c> of</c>

00:04:19.729 --> 00:04:19.739 align:start position:0%
what does that mean so in terms of
 

00:04:19.739 --> 00:04:22.640 align:start position:0%
what does that mean so in terms of
communication<00:04:20.690><c> except</c><00:04:21.690><c> for</c><00:04:21.960><c> a</c><00:04:21.989><c> 32</c><00:04:22.470><c> byte</c>

00:04:22.640 --> 00:04:22.650 align:start position:0%
communication except for a 32 byte
 

00:04:22.650 --> 00:04:24.260 align:start position:0%
communication except for a 32 byte
commitment<00:04:23.190><c> that</c><00:04:23.310><c> the</c><00:04:23.430><c> participants</c><00:04:24.090><c> have</c><00:04:24.240><c> to</c>

00:04:24.260 --> 00:04:24.270 align:start position:0%
commitment that the participants have to
 

00:04:24.270 --> 00:04:25.430 align:start position:0%
commitment that the participants have to
include<00:04:24.750><c> in</c><00:04:24.990><c> their</c>

00:04:25.430 --> 00:04:25.440 align:start position:0%
include in their
 

00:04:25.440 --> 00:04:27.650 align:start position:0%
include in their
and<00:04:25.620><c> transaction</c><00:04:26.420><c> basically</c><00:04:27.420><c> all</c><00:04:27.570><c> the</c>

00:04:27.650 --> 00:04:27.660 align:start position:0%
and transaction basically all the
 

00:04:27.660 --> 00:04:29.950 align:start position:0%
and transaction basically all the
communication<00:04:28.230><c> can</c><00:04:28.380><c> be</c><00:04:28.410><c> done</c><00:04:28.530><c> off</c><00:04:28.800><c> chain</c>

00:04:29.950 --> 00:04:29.960 align:start position:0%
communication can be done off chain
 

00:04:29.960 --> 00:04:33.860 align:start position:0%
communication can be done off chain
secondly<00:04:30.960><c> in</c><00:04:31.050><c> terms</c><00:04:31.080><c> of</c><00:04:31.730><c> of</c><00:04:32.730><c> the</c><00:04:33.150><c> interactive</c>

00:04:33.860 --> 00:04:33.870 align:start position:0%
secondly in terms of of the interactive
 

00:04:33.870 --> 00:04:36.860 align:start position:0%
secondly in terms of of the interactive
of<00:04:34.080><c> the</c><00:04:34.320><c> dispute</c><00:04:35.010><c> mechanism</c><00:04:35.670><c> so</c><00:04:36.180><c> if</c><00:04:36.270><c> any</c>

00:04:36.860 --> 00:04:36.870 align:start position:0%
of the dispute mechanism so if any
 

00:04:36.870 --> 00:04:39.080 align:start position:0%
of the dispute mechanism so if any
participant<00:04:37.560><c> files</c><00:04:37.830><c> a</c><00:04:37.950><c> complaint</c><00:04:38.100><c> this</c>

00:04:39.080 --> 00:04:39.090 align:start position:0%
participant files a complaint this
 

00:04:39.090 --> 00:04:40.790 align:start position:0%
participant files a complaint this
really<00:04:39.390><c> expensive</c><00:04:39.600><c> computation</c><00:04:40.440><c> has</c><00:04:40.530><c> to</c><00:04:40.710><c> be</c>

00:04:40.790 --> 00:04:40.800 align:start position:0%
really expensive computation has to be
 

00:04:40.800 --> 00:04:43.610 align:start position:0%
really expensive computation has to be
done<00:04:40.980><c> on</c><00:04:41.130><c> chain</c><00:04:41.430><c> to</c><00:04:41.640><c> verify</c><00:04:42.150><c> who</c><00:04:42.780><c> was</c><00:04:43.020><c> correct</c>

00:04:43.610 --> 00:04:43.620 align:start position:0%
done on chain to verify who was correct
 

00:04:43.620 --> 00:04:45.920 align:start position:0%
done on chain to verify who was correct
and<00:04:43.770><c> who</c><00:04:43.890><c> was</c><00:04:44.040><c> faulty</c><00:04:44.430><c> and</c><00:04:45.390><c> this</c><00:04:45.600><c> is</c><00:04:45.720><c> very</c>

00:04:45.920 --> 00:04:45.930 align:start position:0%
and who was faulty and this is very
 

00:04:45.930 --> 00:04:47.270 align:start position:0%
and who was faulty and this is very
expensive<00:04:46.140><c> this</c><00:04:46.440><c> cannot</c><00:04:46.680><c> be</c><00:04:46.830><c> done</c><00:04:46.980><c> ovary</c>

00:04:47.270 --> 00:04:47.280 align:start position:0%
expensive this cannot be done ovary
 

00:04:47.280 --> 00:04:48.680 align:start position:0%
expensive this cannot be done ovary
theorem<00:04:47.520><c> so</c><00:04:47.940><c> we</c><00:04:48.120><c> use</c><00:04:48.240><c> it</c><00:04:48.390><c> we</c><00:04:48.480><c> use</c><00:04:48.510><c> an</c>

00:04:48.680 --> 00:04:48.690 align:start position:0%
theorem so we use it we use an
 

00:04:48.690 --> 00:04:50.800 align:start position:0%
theorem so we use it we use an
interactive<00:04:49.020><c> protocol</c><00:04:49.650><c> between</c><00:04:49.980><c> the</c>

00:04:50.800 --> 00:04:50.810 align:start position:0%
interactive protocol between the
 

00:04:50.810 --> 00:04:52.940 align:start position:0%
interactive protocol between the
participant<00:04:51.810><c> who</c><00:04:51.930><c> is</c><00:04:52.020><c> complaining</c><00:04:52.380><c> and</c><00:04:52.800><c> the</c>

00:04:52.940 --> 00:04:52.950 align:start position:0%
participant who is complaining and the
 

00:04:52.950 --> 00:04:54.590 align:start position:0%
participant who is complaining and the
participant<00:04:53.400><c> is</c><00:04:53.580><c> being</c><00:04:53.760><c> complained</c><00:04:54.180><c> against</c>

00:04:54.590 --> 00:04:54.600 align:start position:0%
participant is being complained against
 

00:04:54.600 --> 00:04:57.800 align:start position:0%
participant is being complained against
okay<00:04:55.170><c> in</c><00:04:55.260><c> the</c><00:04:55.350><c> spirit</c><00:04:55.650><c> of</c><00:04:55.710><c> troubie</c><00:04:56.450><c> so</c><00:04:57.450><c> this</c><00:04:57.660><c> is</c>

00:04:57.800 --> 00:04:57.810 align:start position:0%
okay in the spirit of troubie so this is
 

00:04:57.810 --> 00:05:01.040 align:start position:0%
okay in the spirit of troubie so this is
really<00:04:58.050><c> great</c><00:04:58.200><c> because</c><00:04:58.260><c> this</c><00:04:59.690><c> what</c><00:05:00.690><c> it</c><00:05:00.840><c> bring</c>

00:05:01.040 --> 00:05:01.050 align:start position:0%
really great because this what it bring
 

00:05:01.050 --> 00:05:04.280 align:start position:0%
really great because this what it bring
what<00:05:01.320><c> it</c><00:05:01.590><c> what</c><00:05:02.010><c> it</c><00:05:02.040><c> lets</c><00:05:02.850><c> us</c><00:05:03.120><c> it</c><00:05:04.020><c> lets</c><00:05:04.230><c> us</c>

00:05:04.280 --> 00:05:04.290 align:start position:0%
what it what it lets us it lets us
 

00:05:04.290 --> 00:05:05.750 align:start position:0%
what it what it lets us it lets us
arrive<00:05:04.590><c> to</c><00:05:04.800><c> a</c><00:05:04.830><c> situation</c><00:05:05.010><c> where</c><00:05:05.430><c> there's</c><00:05:05.610><c> only</c>

00:05:05.750 --> 00:05:05.760 align:start position:0%
arrive to a situation where there's only
 

00:05:05.760 --> 00:05:08.930 align:start position:0%
arrive to a situation where there's only
one<00:05:05.910><c> on</c><00:05:06.450><c> chain</c><00:05:07.050><c> operation</c><00:05:07.710><c> has</c><00:05:08.100><c> to</c><00:05:08.160><c> be</c><00:05:08.550><c> done</c><00:05:08.760><c> in</c>

00:05:08.930 --> 00:05:08.940 align:start position:0%
one on chain operation has to be done in
 

00:05:08.940 --> 00:05:14.870 align:start position:0%
one on chain operation has to be done in
order<00:05:09.030><c> to</c><00:05:09.920><c> find</c><00:05:10.920><c> out</c><00:05:11.070><c> who</c><00:05:11.280><c> is</c><00:05:11.400><c> faulty</c><00:05:13.460><c> but</c><00:05:14.460><c> this</c>

00:05:14.870 --> 00:05:14.880 align:start position:0%
order to find out who is faulty but this
 

00:05:14.880 --> 00:05:17.120 align:start position:0%
order to find out who is faulty but this
is<00:05:15.120><c> still</c><00:05:15.450><c> too</c><00:05:15.960><c> expensive</c><00:05:15.990><c> to</c><00:05:16.680><c> run</c><00:05:16.800><c> over</c><00:05:16.950><c> here</c>

00:05:17.120 --> 00:05:17.130 align:start position:0%
is still too expensive to run over here
 

00:05:17.130 --> 00:05:19.040 align:start position:0%
is still too expensive to run over here
because<00:05:17.550><c> this</c><00:05:17.700><c> is</c><00:05:17.820><c> typically</c><00:05:18.210><c> going</c><00:05:18.450><c> to</c><00:05:18.540><c> be</c><00:05:18.690><c> an</c>

00:05:19.040 --> 00:05:19.050 align:start position:0%
because this is typically going to be an
 

00:05:19.050 --> 00:05:22.730 align:start position:0%
because this is typically going to be an
elliptic<00:05:19.500><c> curve</c><00:05:19.680><c> operation</c><00:05:20.750><c> okay</c><00:05:21.750><c> so</c><00:05:21.810><c> the</c><00:05:22.590><c> way</c>

00:05:22.730 --> 00:05:22.740 align:start position:0%
elliptic curve operation okay so the way
 

00:05:22.740 --> 00:05:25.280 align:start position:0%
elliptic curve operation okay so the way
to<00:05:22.800><c> address</c><00:05:23.340><c> this</c><00:05:23.550><c> is</c><00:05:23.610><c> to</c><00:05:23.970><c> use</c><00:05:24.150><c> one</c><00:05:25.080><c> of</c><00:05:25.170><c> the</c>

00:05:25.280 --> 00:05:25.290 align:start position:0%
to address this is to use one of the
 

00:05:25.290 --> 00:05:27.530 align:start position:0%
to address this is to use one of the
precompiled<00:05:25.860><c> contracts</c><00:05:26.430><c> that</c><00:05:26.940><c> actually</c><00:05:27.390><c> do</c>

00:05:27.530 --> 00:05:27.540 align:start position:0%
precompiled contracts that actually do
 

00:05:27.540 --> 00:05:29.480 align:start position:0%
precompiled contracts that actually do
elliptic<00:05:27.900><c> curve</c><00:05:28.080><c> operations</c><00:05:28.560><c> and</c><00:05:28.770><c> this</c><00:05:28.860><c> will</c>

00:05:29.480 --> 00:05:29.490 align:start position:0%
elliptic curve operations and this will
 

00:05:29.490 --> 00:05:35.300 align:start position:0%
elliptic curve operations and this will
allow<00:05:29.730><c> us</c><00:05:29.910><c> to</c><00:05:30.150><c> be</c><00:05:30.330><c> two</c><00:05:31.200><c> to</c><00:05:31.470><c> not</c><00:05:31.800><c> to</c><00:05:33.830><c> pass</c><00:05:34.830><c> the</c>

00:05:35.300 --> 00:05:35.310 align:start position:0%
allow us to be two to not to pass the
 

00:05:35.310 --> 00:05:39.500 align:start position:0%
allow us to be two to not to pass the
gas<00:05:35.490><c> limit</c><00:05:37.430><c> so</c><00:05:38.430><c> what</c><00:05:38.669><c> we</c><00:05:38.760><c> were</c><00:05:38.880><c> able</c><00:05:38.940><c> to</c><00:05:39.240><c> do</c><00:05:39.360><c> is</c>

00:05:39.500 --> 00:05:39.510 align:start position:0%
gas limit so what we were able to do is
 

00:05:39.510 --> 00:05:42.320 align:start position:0%
gas limit so what we were able to do is
to<00:05:39.810><c> we</c><00:05:40.169><c> were</c><00:05:40.410><c> able</c><00:05:40.650><c> to</c><00:05:40.680><c> take</c><00:05:41.550><c> the</c><00:05:41.669><c> dkg</c><00:05:42.180><c> the</c>

00:05:42.320 --> 00:05:42.330 align:start position:0%
to we were able to take the dkg the
 

00:05:42.330 --> 00:05:44.300 align:start position:0%
to we were able to take the dkg the
original<00:05:42.690><c> dkg</c><00:05:43.050><c> protocol</c><00:05:43.410><c> and</c><00:05:43.560><c> restricted</c><00:05:44.190><c> to</c>

00:05:44.300 --> 00:05:44.310 align:start position:0%
original dkg protocol and restricted to
 

00:05:44.310 --> 00:05:47.690 align:start position:0%
original dkg protocol and restricted to
only<00:05:44.340><c> use</c><00:05:44.760><c> the</c><00:05:45.720><c> curves</c><00:05:46.110><c> and</c><00:05:46.470><c> the</c><00:05:46.919><c> operations</c>

00:05:47.690 --> 00:05:47.700 align:start position:0%
only use the curves and the operations
 

00:05:47.700 --> 00:05:50.350 align:start position:0%
only use the curves and the operations
that<00:05:47.820><c> are</c><00:05:47.970><c> backed</c><00:05:48.300><c> by</c><00:05:48.419><c> these</c><00:05:48.720><c> alee</c><00:05:48.960><c> by</c><00:05:49.470><c> these</c>

00:05:50.350 --> 00:05:50.360 align:start position:0%
that are backed by these alee by these
 

00:05:50.360 --> 00:05:52.820 align:start position:0%
that are backed by these alee by these
precompiled<00:05:51.360><c> contracts</c><00:05:51.900><c> even</c><00:05:52.380><c> though</c><00:05:52.680><c> these</c>

00:05:52.820 --> 00:05:52.830 align:start position:0%
precompiled contracts even though these
 

00:05:52.830 --> 00:05:54.650 align:start position:0%
precompiled contracts even though these
pre-compiled<00:05:53.460><c> contracts</c><00:05:53.940><c> were</c><00:05:54.030><c> originally</c>

00:05:54.650 --> 00:05:54.660 align:start position:0%
pre-compiled contracts were originally
 

00:05:54.660 --> 00:05:56.900 align:start position:0%
pre-compiled contracts were originally
introduced<00:05:55.410><c> to</c><00:05:55.470><c> e</c><00:05:55.530><c> theorem</c><00:05:55.800><c> just</c><00:05:55.830><c> 2zk</c><00:05:56.490><c> snarks</c>

00:05:56.900 --> 00:05:56.910 align:start position:0%
introduced to e theorem just 2zk snarks
 

00:05:56.910 --> 00:05:58.820 align:start position:0%
introduced to e theorem just 2zk snarks
so<00:05:57.390><c> we</c><00:05:57.510><c> were</c><00:05:57.600><c> able</c><00:05:57.720><c> to</c><00:05:57.870><c> using</c><00:05:58.169><c> for</c><00:05:58.380><c> completely</c>

00:05:58.820 --> 00:05:58.830 align:start position:0%
so we were able to using for completely
 

00:05:58.830 --> 00:06:01.430 align:start position:0%
so we were able to using for completely
different<00:05:58.919><c> use</c><00:05:59.790><c> case</c><00:06:00.060><c> and</c><00:06:00.510><c> we're</c><00:06:01.020><c> using</c><00:06:01.200><c> them</c>

00:06:01.430 --> 00:06:01.440 align:start position:0%
different use case and we're using them
 

00:06:01.440 --> 00:06:05.780 align:start position:0%
different use case and we're using them
for<00:06:01.710><c> this</c><00:06:02.310><c> dkg</c><00:06:02.820><c> and</c><00:06:02.970><c> then</c><00:06:03.120><c> for</c><00:06:03.590><c> pls</c><00:06:04.790><c> threshold</c>

00:06:05.780 --> 00:06:05.790 align:start position:0%
for this dkg and then for pls threshold
 

00:06:05.790 --> 00:06:09.800 align:start position:0%
for this dkg and then for pls threshold
signatures<00:06:06.270><c> to</c><00:06:07.140><c> be</c><00:06:07.260><c> done</c><00:06:07.410><c> over</c><00:06:07.620><c> a</c><00:06:07.650><c> theorem</c><00:06:08.810><c> so</c>

00:06:09.800 --> 00:06:09.810 align:start position:0%
signatures to be done over a theorem so
 

00:06:09.810 --> 00:06:11.150 align:start position:0%
signatures to be done over a theorem so
this<00:06:09.840><c> is</c><00:06:10.050><c> pretty</c><00:06:10.320><c> cool</c><00:06:10.530><c> that</c><00:06:10.590><c> we</c><00:06:10.800><c> were</c><00:06:10.890><c> able</c><00:06:11.130><c> to</c>

00:06:11.150 --> 00:06:11.160 align:start position:0%
this is pretty cool that we were able to
 

00:06:11.160 --> 00:06:14.210 align:start position:0%
this is pretty cool that we were able to
do<00:06:11.400><c> this</c><00:06:11.630><c> we</c><00:06:12.630><c> proved</c><00:06:12.930><c> that</c><00:06:12.960><c> our</c><00:06:13.410><c> variant</c><00:06:14.130><c> of</c>

00:06:14.210 --> 00:06:14.220 align:start position:0%
do this we proved that our variant of
 

00:06:14.220 --> 00:06:17.810 align:start position:0%
do this we proved that our variant of
the<00:06:14.310><c> dkg</c><00:06:14.790><c> is</c><00:06:15.210><c> safe</c><00:06:15.510><c> and</c><00:06:15.720><c> it</c><00:06:15.810><c> works</c><00:06:16.070><c> and</c><00:06:17.070><c> so</c><00:06:17.460><c> all</c>

00:06:17.810 --> 00:06:17.820 align:start position:0%
the dkg is safe and it works and so all
 

00:06:17.820 --> 00:06:19.730 align:start position:0%
the dkg is safe and it works and so all
these<00:06:18.360><c> things</c><00:06:18.630><c> together</c><00:06:18.840><c> were</c><00:06:19.110><c> actually</c><00:06:19.440><c> able</c>

00:06:19.730 --> 00:06:19.740 align:start position:0%
these things together were actually able
 

00:06:19.740 --> 00:06:22.340 align:start position:0%
these things together were actually able
to<00:06:19.950><c> were</c><00:06:20.790><c> actually</c><00:06:21.090><c> able</c><00:06:21.210><c> to</c><00:06:21.360><c> make</c><00:06:21.660><c> the</c><00:06:21.870><c> dkg</c>

00:06:22.340 --> 00:06:22.350 align:start position:0%
to were actually able to make the dkg
 

00:06:22.350 --> 00:06:25.490 align:start position:0%
to were actually able to make the dkg
run<00:06:22.610><c> efficiently</c><00:06:23.610><c> over</c><00:06:23.940><c> e</c><00:06:24.150><c> theorem</c><00:06:24.600><c> with</c><00:06:25.200><c> a</c>

00:06:25.490 --> 00:06:25.500 align:start position:0%
run efficiently over e theorem with a
 

00:06:25.500 --> 00:06:29.810 align:start position:0%
run efficiently over e theorem with a
very<00:06:26.040><c> large</c><00:06:26.160><c> number</c><00:06:26.520><c> of</c><00:06:26.550><c> participants</c><00:06:28.820><c> so</c>

00:06:29.810 --> 00:06:29.820 align:start position:0%
very large number of participants so
 

00:06:29.820 --> 00:06:33.050 align:start position:0%
very large number of participants so
there<00:06:30.390><c> is</c><00:06:30.540><c> a</c><00:06:30.890><c> prototype</c><00:06:31.890><c> implementation</c><00:06:32.460><c> that</c>

00:06:33.050 --> 00:06:33.060 align:start position:0%
there is a prototype implementation that
 

00:06:33.060 --> 00:06:35.390 align:start position:0%
there is a prototype implementation that
you<00:06:33.180><c> can</c><00:06:33.360><c> find</c><00:06:33.720><c> in</c><00:06:34.380><c> our</c><00:06:34.500><c> github</c><00:06:34.770><c> it's</c><00:06:35.010><c> a</c><00:06:35.130><c> it's</c><00:06:35.310><c> a</c>

00:06:35.390 --> 00:06:35.400 align:start position:0%
you can find in our github it's a it's a
 

00:06:35.400 --> 00:06:36.800 align:start position:0%
you can find in our github it's a it's a
proof<00:06:35.580><c> of</c><00:06:35.700><c> concept</c><00:06:35.850><c> it's</c><00:06:36.210><c> not</c><00:06:36.300><c> production</c>

00:06:36.800 --> 00:06:36.810 align:start position:0%
proof of concept it's not production
 

00:06:36.810 --> 00:06:38.180 align:start position:0%
proof of concept it's not production
already<00:06:37.110><c> or</c><00:06:37.229><c> anything</c>

00:06:38.180 --> 00:06:38.190 align:start position:0%
already or anything
 

00:06:38.190 --> 00:06:41.390 align:start position:0%
already or anything
and<00:06:38.610><c> there</c><00:06:38.880><c> is</c><00:06:38.970><c> a</c><00:06:39.000><c> paper</c><00:06:39.750><c> coming</c><00:06:40.410><c> which</c><00:06:40.710><c> you</c>

00:06:41.390 --> 00:06:41.400 align:start position:0%
and there is a paper coming which you
 

00:06:41.400 --> 00:06:42.770 align:start position:0%
and there is a paper coming which you
can<00:06:41.550><c> also</c><00:06:41.790><c> check</c><00:06:42.120><c> out</c><00:06:42.210><c> and</c><00:06:42.420><c> I</c><00:06:42.480><c> encourage</c><00:06:42.750><c> you</c>

00:06:42.770 --> 00:06:42.780 align:start position:0%
can also check out and I encourage you
 

00:06:42.780 --> 00:06:44.440 align:start position:0%
can also check out and I encourage you
to<00:06:42.870><c> comment</c><00:06:43.290><c> asking</c><00:06:43.560><c> a</c><00:06:43.620><c> question</c><00:06:43.920><c> if</c><00:06:44.040><c> you</c><00:06:44.160><c> have</c>

00:06:44.440 --> 00:06:44.450 align:start position:0%
to comment asking a question if you have
 

00:06:44.450 --> 00:06:55.770 align:start position:0%
to comment asking a question if you have
yeah<00:06:45.450><c> thank</c><00:06:45.720><c> you</c><00:06:45.750><c> very</c><00:06:45.930><c> much</c>

00:06:55.770 --> 00:06:55.780 align:start position:0%
 
 

00:06:55.780 --> 00:06:57.840 align:start position:0%
 
you