Real-world Universal zkSNARKs are non-malleable - Archive ouverte HAL Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2024

Real-world Universal zkSNARKs are non-malleable

Antonio Faonio
  • Fonction : Auteur
  • PersonId : 1162438
Dario Fiore
Luigi Russo

Résumé

Simulation extractability is a strong security notion of zkSNARKs that guarantees that an attacker who produces a valid proof must know the corresponding witness, even if the attacker had prior access to proofs generated by other users. Notably, simulation extractability implies that proofs are non-malleable and is of fundamental importance for applications of zkSNARKs in distributed systems. In this work, we study sufficient and necessary conditions for constructing simulation-extractable universal zkSNARKs via the popular design approach based on compiling polynomial interactive oracle proofs (PIOP). Our main result is the first security proof that popular universal zkSNARKs, such as PLONK and Marlin, as deployed in the real world, are simulation-extractable. Our result fills a gap left from previous work (Faonio et al. TCC’23, and Kohlweiss et al. TCC’23) which could only prove the simulation extractability of the “textbook” versions of these schemes and does not capture their optimized variants, with all the popular optimization tricks in place, that are eventually implemented and deployed in software libraries.
Fichier principal
Vignette du fichier
publi-7667.pdf (993.21 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04575284 , version 1 (14-05-2024)

Identifiants

  • HAL Id : hal-04575284 , version 1

Citer

Antonio Faonio, Dario Fiore, Luigi Russo. Real-world Universal zkSNARKs are non-malleable. 2024. ⟨hal-04575284⟩

Collections

EURECOM ANR
0 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More