一句话:提出统一脉动阵列加速器 UniZK,用灵活内核映射高效支持多样零知识证明协议。
零知识证明(ZKP)广泛用于隐私保护区块链与零知识机器学习等场景。现有 GPU、FPGA 和 ASIC 加速主要面向依赖昂贵椭圆曲线运算的经典协议;基于哈希的新兴 ZKP 协议虽降低算法复杂度,却引入多种计算内核,难以由单一加速器高效处理。本文提出 UniZK:采用统一脉动阵列硬件架构,加入局部链路与向量处理模式,并设计灵活映射策略,将数论变换、哈希和通用多项式计算等内核映射到该硬件且保持高资源利用率。评估显示,UniZK 相比同协议 CPU 和 GPU 实现平均加速 97 倍和 46 倍,并比不同协议的既有 ZKP 加速器快 840 倍。
Zero-knowledge proof (ZKP) is an important cryptographic tool that sees wide applications in real-world scenarios where privacy must be protected, including privacy-preserving blockchains and zero-knowledge machine learning. Existing ZKP acceleration approaches using GPUs, FPGAs, and ASICs focus only on classic protocols that rely on expensive elliptic curve arithmetics. Emerging ZKP protocols based on hash functions can greatly reduce the algorithmic complexity, but they also introduce much more diverse computation kernels that cannot be efficiently handled by a single accelerator chip if dedicated units for each kernel are used. Our approach is to leverage a unified hardware architecture that is able to efficiently support the common primitives in ZKP, and then use smart mapping strategies to flexibly map various kernels to such hardware while ensuring high resource utilization. We design UniZK as such a ZKP accelerator, with a systolic-array-based hardware architecture enhanced with extra local links and a new vector processing mode. We propose novel mapping strategies to support diverse kernels including number theoretic transforms, hash functions, and general polynomial computations. UniZK provides 97x and 46x speedups on average compared to the CPU and GPU implementations of the same protocols, and is also 840x faster than previous ZKP accelerators using different protocols.