În data de 23 iunie 2026, la ora 14:30, Sala 512 (PBT), Antonio Faonio (Eurecom) prezintă:
Making zkSNARKs Non-Malleable
Rezumat: Zero-knowledge SNARKs (zkSNARKs) are cryptographic proof systems that allow a prover to convince a verifier that a statement is true, with very small proofs and fast verification, without revealing the underlying witness.
The standard security notion for SNARKs is knowledge soundness, which guarantees that any prover who convinces the verifier must “know” a valid witness. A stronger notion is simulation extractability, which ensures that even an adversary who has seen simulated proofs cannot create a new valid proof without actually knowing a witness, and in particular implies non-malleability. This stronger guarantee is especially important in distributed and adversarial settings, where proof malleability can become a real threat.
In this talk, we revisit simulation extractability for universal zkSNARKs in the PIOP-to-SNARK paradigm. We discuss how this property can be achieved and analyzed in systems used in practice, with particular attention to optimizations such as the linearization trick.
We also place these results in a broader context, reviewing existing approaches to simulation extractability in the literature and highlighting alternative techniques and trade-offs. The goal is to give a unified and accessible picture of how simulation extractability can be obtained in modern zkSNARK constructions, and what design choices are needed to ensure it in practice.
Acknowledgement: The talk is an event associated with the PATTERN project, which receives funding from the French National Research Agency under Grant Agreement No. ANR-23-CHR4-0008, the Luxembourg National Fund under Grant Agreement No. INTER/CHIST23/17931746, and the Romanian Ministry of Research, Innovation and Digitization, CNCS/CCCDI – UEFISCDI, project number ERANET-CHISTERA-IV-PATTERN, within PNCDI IV.
Prezentarea este asociată Seminarului de Criptografie din FMI.