Zero-Knowledge Proofs: Privacy-Preserving Digital Identity with Cla...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Zero-Knowledge
Proofs (ZKP)
Privacy-Preserving Digital
Identity
October 11, 2018
Clare Nelson, CISSP, CIPP/E
VP Business D...

Why?
Raison d’Être for Zero-Knowledge Proofs
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Zero-Knowledge Proofs (ZKPs) Enhance Privacy
https://docs.google.com/document/d/1spgtYG8iXZ_NjUXdN8AEdKdGmaulE8r-mf7NsQ-_y...

zk-STARKs Paper
Scalable, transparent, and post-quantum secure computational integrity
(March 2018)
https://eprint.iacr.or...

Scope
Digital Identity
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

• Artificial Intelligence (OpenMined)
• Cryptocurrency
• Digital Watermarks
• Ethereum
• E-Voting
• Gaming
• Genomics
• Lo...

ZKP and Digital Identity
What Problems Are We Solving?
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Zero-Knowledge Proofs
If your per-son-al data
is nev-er col-lect-ed, it
can-not be sto-len.
https://www.zurich.ibm.com/ide...

Motivations for ZKP
and Digital Identity
Digital Identity Risks
•Loss of privacy, control
•Data breaches
•Identity theft
o...

Ideal for Identification
ZKPs are the ideal solution to challenges in
identification
• Users can prove identities
o No exc...

Zero-Knowledge Proofs
Definition
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Zero-Knowledge Proofs
One of the most powerful
tools cryptographers have
ever devised
https://z.cash/team.html
https://blo...

Definition of Zero-Knowledge Proof
Proof System, not Geometry Proof
http://www0.cs.ucl.ac.uk/staff/J.Groth/ShortNIZK.pdf
h...

Definition of Zero-Knowledge Proof
Enable a Prover to convince a
Verifier of the validity of a
statement
• Yields nothing ...

Interactive Zero-Knowledge Proof
Derived from
http://blog.stratumn.com/zkp-hash-chains/
VerifierProver
Construct
ZKP
Verif...

ZKP Requirements
Completeness
• If statement is true, verifier will be
convinced by prover
Soundness
• If statement is fal...

007 Wants to Read the News
Credit to Anna Lysyanskaya for the 007 metaphor
Graphic:
I can tell you.
But then I’ll have to ...

007 Uses Subscription
My subscription is
#4309115
www.telegraph.co
.uk
Today’s news?
Today’snews?Who are you?
Do you have ...

Completeness: Telegraph Accepts Proof
Here is a
Zero-Knowledge Proof
www.telegraph.co
.uk
Today’s news?
Today’snews?Who ar...

Soundness
Credit to Anna Lysyanskaya for the 007 metaphor
Graphic: https://en.wikipedia.org/wiki/M_(James_Bond)
It’s Bond....

ZKP Illustration
Interactive ZKP
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Zero-Knowledge Proof Illustration
Matthew Green
Telecom Company
• Cell towers
• Vertices
• Avoid signal overlap
• Use 1 of...

Zero-Knowledge Proof Illustration
Matthew Green
3-Color Graph Problem
• Use colors to represent
frequency bands
• Solve fo...

Zero-Knowledge Proof Illustration
Matthew Green
Proof of Solution
• Prove have solution without
revealing it
• Hats hide t...

Zero-Knowledge Proof Illustration
Matthew Green
Proof of Solution
• Remove any two hats
• See vertices are different
color...

6
4
Zero-Knowledge Proof Illustration
Matthew Green
Repeat this process
• Clear previous solution
• (Add randomness)
• Sol...

ZKP Variants
Examples
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Examples of ZKP Variants
https://www.slideshare.net/arunta007/elliptic-curve-cryptography-and-zero-knowledge-proof-2791453...

Trusted Setup
Zcash example
https://z.cash/technology/paramgen
https://z.cash/blog/the-design-of-the-ceremony/
https://the...

ZKP Examples
Digital Identity
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

ZKP Flexibility, Variety of Use Cases
• Range proofs
o Age range: 25-45 years old
• Set membership
o Citizen of European U...

Graph Isomorphism ZKP
Paper by Manuel Blum, UC Berkeley, 1986
Prover Verifier
(Graph Isomorphism Problem: Given two graphs...

Graph Isomorphism ZKP
Passport Driver’s License National ID
Relying
Party
Authoritative
Sources
No personal data
leaves mo...

zk-STARK Example
(Ben-Sasson, Bentov, Horesh, Riabzev)
https://eprint.iacr.org/2018/046.pdf
National Offender DNA Database...

Designated Verifier
https://eprint.iacr.org/2017/1029.pd
Designated-Verifier
Non-Interactive
Zero-Knowledge Proof of
Knowl...

ZKP Identity-Related Landscape
Identity Verification, Authentication

Considerations
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

ZKP Considerations
Depends on Implementation or Use Cases
1. Transparent
• Setup with no reliance on any third
party
• No ...

1985
Goldwasser, Micali,
Rackoff paper
2018
ZKP Standards
Organization
2012
Goldwasser, Micali
win Turing Award
https://gr...

ZKP Standards
https://zkproof.org/
https://zkproof.org/documents.html
*https://zkproof.org/zcon0_notes.pdf
I think you sho...

ZKP Standards
https://docs.google.com/document/d/1spgtYG8iXZ_NjUXdN8AEdKdGmaulE8r-mf7NsQ-_y4E/edit#heading=h.1irq6vg7ivr
Z...

ZKP Standards
https://zkproof.org/
https://zkproof.org/documents.html
*https://zkproof.org/zcon0_notes.pdf (June 2018)
ZKP...

Trust
https://zkproof.org/zcon0.html
Graphic: http://www.criticbrain.com/articles/india-needs-to-bridge-gap-between-academ...

Resources
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

ZKP Resources
• ISO/IEC 9798-5
• Letter to NIST
• Code
o libSNARK C++ library
o libSTARK C++ library
o Bulletproofs using ...

Gratitude
ZKP Inventors, Pioneers
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

We Stand on the Shoulders of Giants
https://www.csail.mit.edu/user/733
https://people.csail.mit.edu/silvio/
https://cyberw...

@Safe_SaaS
Questions?
www.slideshare.net/eralcnoslen/presentations
Clare_Nelson @ ClearMark . biz
SSIMeetup.orghttps://cre...

Mathematics
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Bulletproof
https://blog.chain.com/faster-bulletproofs-with-ristretto-avx2-29450b4490cd
Range Proof Protocol

Backup Slides
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Known Vulnerabilities
An Example
SSIMeetup.orghttps://creativecommons.org/licenses/by-sa/4.0/

Zero-Knowledge Range Proof (ZKRP)
Validate
•Person is 18-65 years old
o Without disclosing the age
•Person is in Europe
o ...

ZKRP Vulnerability
• Madars Virza
• “The publicly computable value y/t is roughly
the same magnitude (in expectation) as w...

Source: https://www.usenix.org/legacy/event/hotsec08/tech/full_papers/parno/parno_html/index.html
If you have a PC,
you ma...

References
• Attribute-based Credentials for Trust (ABC4Trust) Project, https://abc4trust.eu/ (2017).
• AU2EU Project, Aut...

References
• Cutler, Becky. The Feasibility and Application of Using Zero-Knowledge Protocol for Authentication Systems,
h...

References
• Groth, Jens. Short Pairing-Based Non-Interactive Zero-Knowledge Arguments, http://www0.cs.ucl.ac.uk/staff/J.G...

References
• Lindell, Yehudi. Efficient Zero-Knowledge Proof, https://www.youtube.com/watch?v=Vahw28dValA, (2015).
• Lysya...

Graph Isomorphism
https://en.wikipedia.org/wiki/Graph_isomorphism
G and H are isomorphic graphs
SSIMeetup.org

Graph Isomorphism ZKP (GIZKP)
Carnegie Mellon University, 2006
https://www.cs.cmu.edu/~ryanw/crypto/lec6.pdf
How does Prov...

Graph Isomorphism ZKP (GIZKP)
Cornell University, 2009
http://www.cs.cornell.edu/courses/cs6810/2009sp/scribe/lecture18.pd...

EUROCRYPT 2018
Efficient Designated-Verifier Non-Interactive
Zero-Knowledge Proofs of Knowledge
• Pyrros Chaidos (Universi...

The Schnorr NIZK proof is obtained from
the interactive Schnorr identification
scheme through a Fiat-Shamir
transformation...

Zero-Knowledge Proof, Formal Definition
http://www.cs.cornell.edu/courses/cs6810/2009sp/scribe/lecture18.pd
An interactive...

ZKPOK
I can’t tell you my
secret,
but I can prove to
you
that I know the
secret
Source: J. Chou, SC700 A2 Internet Informa...

https://www.symantec.com/connect/blogs/you-can-t-have-privacy-without-security
https://www.microsoft.com/en-us/research/re...

ZKP Variations
• GMR defined knowledge as the
computational power of a party
• Differentiates “knowledge” from
“informatio...

• One-Round ZKP
• Pairing-Based Non-Interactive Arguments
• Perfect ZKPs
• Private-coin ZKP
• Public-coin ZKP
• Scalable T...

Non-Interactive Zero-Knowledge Proof
http://slideplayer.com/slide/2891428
zk-SNARK Proof
SSIMeetup.org

ISO/IEC 9798-5:2009
Compliance with ISO/IEC 9798-5 may involve the use of the following
patents and their counterparts in ...

Attack Resilience (From Academia)
http://repository.ust.hk/ir/bitstream/1783.1-6277/1/pseudo.pdf
Attack Description Mitiga...

ZKP Challenges
https://www.slideshare.net/arunta007/elliptic-curve-cryptography-and-zero-knowledge-proof-27914533?next_sli...

YouTube videos are no longer supported on Slideshare

View original on YouTube

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1010457 views
Storytelling For The Web: Integrate... by Chiara Aliotta 918112 views
Artificial Intelligence, Data and C... by OECD Directorate ... 818086 views
How to Leverage AI to Boost Employe... by SocialHRCamp 341372 views
2024 State of Marketing Report – by... by Marius Sescu 194920 views
Everything You Need To Know About C... by Expeed Software 218230 views

View on Slideshare

1 of 74 Ad

View on Slideshare

1 of 74 Ad