Verifiable Distributed Aggregation Functions
doc
主要针对smc的场景，相对于DP引入noise的模糊统计，vdaf是通过拆分提交-独立计算-合并求值处理。
client -> aggregator -> collector。
client随机机拆分上报n个share给n个aggregator，aggregator整合计算后提交到collector，collector合并计算。
如果client提交share, proof给到aggregator，则为vdaf。
prio
zkp: secret-shared non-interactive proofs (SNIPs)
proof通过f(r), r*g(r), r*h(r)构造r*(f(r)*g(r) - h(r))的validate进行聚合校验。
PLASMA
PLASMA: Private, Lightweight Aggregated Statistics against Malicious Adversaries with Full Security
