Skip to main content
1 of 5
Paul Razvan Berg
  • 18.7k
  • 6
  • 79
  • 148

A few of your points are valid (e.g. SNARKs and STARKS are both faster than Bulletproofs) but there are also some mistakes:

  1. STARKs are only faster than SNARKs at the prover level (1.6s vs 2.3s), while for verifiers the protocol is slightly slower (16ms vs 10ms).
  2. If by shorter you mean size in bytes, Bulletproofs are only smaller than STARKs (1,300B vs 45,000B), while they are significantly larger than SNARKs (1,300B vs 288B)

What are the main differences (advantages and disadvantages)?

According to Zooko Wilcox's (Zcash) keynote from Devcon4:

zooko

According to Elena Nadilinski's slides from Devcon4:

leanthebean

Also, according to Eli-Ben Sasson's (Starkware) keynote at the Technion Summer School:

eliben

Paul Razvan Berg
  • 18.7k
  • 6
  • 79
  • 148