Paper 2025/921
Zero-knowledge Authenticator for Blockchain: Policy-private and Obliviously Updateable
Abstract
Transaction details and participant identities on the blockchain are often publicly exposed. In this work, we posit that blockchain's transparency should not come at the cost of privacy. To that end, we introduce zero-knowledge authenticators (zkAt), a new cryptographic primitive for privacy-preserving authentication on public blockchains. zkAt utilizes zero-knowledge proofs to enable users to authenticate transactions, while keeping the underlying authentiction policies private. Prior solutions for such {policy-private authentication} required the use of threshold signatures, which can only hide the threshold access structure itself. In comparison, zkAt provides privacy for arbitrarily complex authentication policies, and offers a richer interface even within the threshold access structure by, for instance, allowing for the combination of signatures under distinct signature schemes. In order to construct zkAt, we design a compiler that transforms the popular Groth16 non-interactive zero knowledge (NIZK) proof system into a NIZK with equivocable verification keys, a property that we define in this work. Then, for any zkAt constructed using proof systems with this new property, we show that all public information must be independent of the policy, thereby achieving policy-privacy. Next, we give an extension of zkAt, called zkAt+ wherein, assuming a trusted authority, policies can be updated obliviously in the sense that a third-party learns no new information when a policy is updated by the policy issuer. We also give a theoretical construction for zkAt+ using recursive NIZKs, and explore the integration of zkAt into modern blockchains. Finally, to evaluate their feasibility, we implement both our schemes for a specific threshold access structure. Our findings show that zkAt achieves comparable performance to traditional threshold signatures, while also attaining privacy for significantly more complex policies with very little overhead.
Metadata
- Available format(s)
-
PDF
- Category
- Cryptographic protocols
- Publication info
- Preprint.
- Keywords
- blockchain privacyauthentication schemesthreshold walletszero knowledge proofs
- Contact author(s)
-
kostas @ mystenlabs com
deepak @ mystenlabs com
arnab @ mystenlabs com
joy @ mystenlabs com
ayadav5 @ gmu edu - History
- 2025-05-23: revised
- 2025-05-22: received
- See all versions
- Short URL
- https://ia.cr/2025/921
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2025/921, author = {Kostas Kryptos Chalkias and Deepak Maram and Arnab Roy and Joy Wang and Aayush Yadav}, title = {Zero-knowledge Authenticator for Blockchain: Policy-private and Obliviously Updateable}, howpublished = {Cryptology {ePrint} Archive, Paper 2025/921}, year = {2025}, url = {https://eprint.iacr.org/2025/921} }