Real-World Universal zkSNARKs are Non-Malleable - EURECOM
Communication Dans Un Congrès Année : 2024

Real-World Universal zkSNARKs are Non-Malleable

Antonio Faonio
  • Fonction : Auteur
  • PersonId : 1441535
Dario Fiore
Luigi Russo

Résumé

Simulation extractability is a strong security notion of zkSNARKs that guarantees that an attacker who produces a valid proof must know the corresponding witness, even if the attacker had prior access to proofs generated by other users. Notably, simulation extractability implies that proofs are non-malleable and is of fundamental importance for applications of zkSNARKs in distributed systems. In this work, we study sufficient and necessary conditions for constructing simulation-extractable universal zkSNARKs via the popular design approach based on compiling polynomial interactive oracle proofs (PIOP). Our main result is the first security proof that popular universal zkSNARKs, such as PLONK and Marlin, as deployed in the real world, are simulation-extractable. Our result fills a gap left from previous work (Faonio et al. TCC'23, and Kohlweiss et al. TCC'23) which could only prove the simulation extractability of the "textbook" versions of these schemes and does not capture their optimized variants, with all the popular optimization tricks in place, that are eventually implemented and deployed in software libraries.
Fichier principal
Vignette du fichier
publi-7854.pdf (788.7 Ko) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-04783973 , version 1 (14-11-2024)

Licence

Identifiants

Citer

Antonio Faonio, Dario Fiore, Luigi Russo. Real-World Universal zkSNARKs are Non-Malleable. CCS 2024, 31st ACM Conference on Computer and Communications Security, ACM, Oct 2024, Salt Lake City, United States. ⟨10.1145/3658644.3690351⟩. ⟨hal-04783973⟩

Collections

EURECOM ANR
0 Consultations
0 Téléchargements

Altmetric

Partager

More