Document Open Access Logo

Cache Timing Leakages in Zero-Knowledge Protocols

Authors Shibam Mukherjee , Christian Rechberger , Markus Schofnegger

PDF

File

Thumbnail PDF
PDF
LIPIcs.AFT.2025.1.pdf
  • Filesize: 1.06 MB
  • 26 pages

Document Identifiers

Related Versions

Subject Classification

ACM Subject Classification
  • Security and privacy → Domain-specific security and privacy architectures
Keywords
  • zero-knowledge
  • protocol
  • cache timing
  • side-channel
  • leakage

Metrics

  • Access Statistics
  • Total Accesses (updated on a weekly basis)
    0
    PDF Downloads
    0
    Metadata Views

Abstract

The area of modern zero-knowledge proof systems has seen a significant rise in popularity over the last couple of years, with new techniques and optimized constructions emerging on a regular basis. 
As the field matures, the aspect of implementation attacks becomes more relevant, however side-channel attacks on zero-knowledge proof systems have seen surprisingly little treatment so far. In this paper, we give an overview of potential attack vectors and show that some of the underlying finite field libraries, and implementations of heavily used components like hash functions using them, are vulnerable w.r.t. cache attacks on CPUs.
On the positive side, we demonstrate that the computational overhead to protect against these attacks is relatively small.

Cite As Get BibTex

Shibam Mukherjee, Christian Rechberger, and Markus Schofnegger. Cache Timing Leakages in Zero-Knowledge Protocols. In 7th Conference on Advances in Financial Technologies (AFT 2025). Leibniz International Proceedings in Informatics (LIPIcs), Volume 354, pp. 1:1-1:26, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2025) https://doi.org/10.4230/LIPIcs.AFT.2025.1

Author Details

Shibam Mukherjee
  • Graz University of Technology, Austria
  • Know Center, Graz, Austria
Christian Rechberger
  • Graz University of Technology, Austria
  • TACEO, Graz, Austria
Markus Schofnegger
  • Fabric Cryptography, San Francisco, CA, USA

Acknowledgements

Special thanks to Andreas Kogler for all the side-channel discussions we had. Also thanks to Erik Kraft and Lukas Giner for the discussions on specific aspects of the attacks. We would also very much like to thank Roman Walch and the members of TACEO and other groups for their useful feedback, especially on the current state of the art ZK scenario.

References

  1. Dakshi Agrawal, Bruce Archambeault, Josyula R. Rao, and Pankaj Rohatgi. The EM side-channel(s). In Burton S. Kaliski Jr., Çetin Kaya Koç, and Christof Paar, editors, Cryptographic Hardware and Embedded Systems - CHES 2002, 4th International Workshop, Redwood Shores, CA, USA, August 13-15, 2002, Revised Papers, volume 2523 of Lecture Notes in Computer Science, pages 29-45. Springer, 2002. URL: https://doi.org/10.1007/3-540-36400-5_4.
  2. Miguel Ambrona, Marc Beunardeau, Anne-Laure Schmitt, and Raphael R. Toledo. aPlonK: Aggregated PlonK from multi-polynomial commitment schemes. In Junji Shikata and Hiroki Kuzuno, editors, Advances in Information and Computer Security - 18th International Workshop on Security, IWSEC 2023, Yokohama, Japan, August 29-31, 2023, Proceedings, volume 14128 of Lecture Notes in Computer Science, pages 195-213. Springer, 2023. URL: https://doi.org/10.1007/978-3-031-41326-1_11.
  3. Scott Ames, Carmit Hazay, Yuval Ishai, and Muthuramakrishnan Venkitasubramaniam. Ligero: Lightweight sublinear arguments without a trusted setup. In Bhavani Thuraisingham, David Evans, Tal Malkin, and Dongyan Xu, editors, Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017, pages 2087-2104. ACM, 2017. URL: https://doi.org/10.1145/3133956.3134104.
  4. Gorka Irazoqui Apecechea, Thomas Eisenbarth, and Berk Sunar. S$a: A shared cache attack that works across cores and defies VM sandboxing - and its application to AES. In 2015 IEEE Symposium on Security and Privacy, SP 2015, San Jose, CA, USA, May 17-21, 2015, pages 591-604. IEEE Computer Society, 2015. URL: https://doi.org/10.1109/SP.2015.42.
  5. ark ff. ark-ff. URL: https://docs.rs/ark-ff/0.4.2/ark_ff/.
  6. Gal Arnon, Alessandro Chiesa, Giacomo Fenzi, and Eylon Yogev. STIR: reed-solomon proximity testing with fewer queries. IACR Cryptol. ePrint Arch., page 390, 2024. URL: https://eprint.iacr.org/2024/390.
  7. Aztec. Aztec. URL: https://aztec.network/.
  8. Carsten Baum, Ward Beullens, Shibam Mukherjee, Emmanuela Orsini, Sebastian Ramacher, Christian Rechberger, Lawrence Roy, and Peter Scholl. One tree to rule them all: Optimizing GGM trees and owfs for post-quantum signatures. IACR Cryptol. ePrint Arch., page 490, 2024. URL: https://eprint.iacr.org/2024/490.
  9. Carsten Baum, Cyprien Delpech de Saint Guilhem, Daniel Kales, Emmanuela Orsini, Peter Scholl, and Greg Zaverucha. Banquet: Short and fast signatures from AES. In Juan A. Garay, editor, Public-Key Cryptography - PKC 2021 - 24th IACR International Conference on Practice and Theory of Public Key Cryptography, Virtual Event, May 10-13, 2021, Proceedings, Part I, volume 12710 of Lecture Notes in Computer Science, pages 266-297. Springer, 2021. URL: https://doi.org/10.1007/978-3-030-75245-3_11.
  10. Eli Ben-Sasson, Iddo Bentov, Yinon Horesh, and Michael Riabzev. Fast Reed-Solomon Interactive Oracle Proofs of Proximity. In ICALP, volume 107 of LIPIcs, pages 14:1-14:17. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2018. URL: https://doi.org/10.4230/LIPICS.ICALP.2018.14.
  11. Eli Ben-Sasson, Iddo Bentov, Yinon Horesh, and Michael Riabzev. Scalable, transparent, and post-quantum secure computational integrity. IACR Cryptol. ePrint Arch., page 46, 2018. URL: http://eprint.iacr.org/2018/046.
  12. Eli Ben-Sasson, Iddo Bentov, Yinon Horesh, and Michael Riabzev. Scalable, transparent, and post-quantum secure computational integrity. IACR Cryptol. ePrint Arch., page 46, 2018. URL: http://eprint.iacr.org/2018/046.
  13. Eli Ben-Sasson, Alessandro Chiesa, Christina Garman, Matthew Green, Ian Miers, Eran Tromer, and Madars Virza. Zerocash: Decentralized anonymous payments from bitcoin. In 2014 IEEE Symposium on Security and Privacy, SP 2014, Berkeley, CA, USA, May 18-21, 2014, pages 459-474. IEEE Computer Society, 2014. URL: https://doi.org/10.1109/SP.2014.36.
  14. Eli Ben-Sasson, Alessandro Chiesa, Michael Riabzev, Nicholas Spooner, Madars Virza, and Nicholas P. Ward. Aurora: Transparent succinct arguments for R1CS. In Yuval Ishai and Vincent Rijmen, editors, Advances in Cryptology - EUROCRYPT 2019 - 38th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Darmstadt, Germany, May 19-23, 2019, Proceedings, Part I, volume 11476 of Lecture Notes in Computer Science, pages 103-128. Springer, 2019. URL: https://doi.org/10.1007/978-3-030-17653-2_4.
  15. Eli Ben-Sasson, Alessandro Chiesa, and Nicholas Spooner. Interactive Oracle Proofs. In TCC (B2), volume 9986 of Lecture Notes in Computer Science, pages 31-60, 2016. URL: https://doi.org/10.1007/978-3-662-53644-5_2.
  16. Josh Cohen Benaloh and Michael de Mare. One-way accumulators: A decentralized alternative to digital sinatures (extended abstract). In Tor Helleseth, editor, Advances in Cryptology - EUROCRYPT '93, Workshop on the Theory and Application of of Cryptographic Techniques, Lofthus, Norway, May 23-27, 1993, Proceedings, volume 765 of Lecture Notes in Computer Science, pages 274-285. Springer, 1993. URL: https://doi.org/10.1007/3-540-48285-7_24.
  17. Daniel J Bernstein. Cache-timing attacks on aes, 2005. Google Scholar
  18. Rishabh Bhadauria, Zhiyong Fang, Carmit Hazay, Muthuramakrishnan Venkitasubramaniam, Tiancheng Xie, and Yupeng Zhang. Ligero++: A new optimized sublinear IOP. In Jay Ligatti, Xinming Ou, Jonathan Katz, and Giovanni Vigna, editors, CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020, pages 2025-2038. ACM, 2020. URL: https://doi.org/10.1145/3372297.3417893.
  19. Nir Bitansky, Ran Canetti, Alessandro Chiesa, and Eran Tromer. From extractable collision resistance to succinct non-interactive arguments of knowledge, and back again. In Shafi Goldwasser, editor, Innovations in Theoretical Computer Science 2012, Cambridge, MA, USA, January 8-10, 2012, pages 326-349. ACM, 2012. URL: https://doi.org/10.1145/2090236.2090263.
  20. Jonathan Bootle, Andrea Cerulli, Jens Groth, Sune K. Jakobsen, and Mary Maller. Arya: Nearly linear-time zero-knowledge proofs for correct program execution. In Thomas Peyrin and Steven D. Galbraith, editors, Advances in Cryptology - ASIACRYPT 2018 - 24th International Conference on the Theory and Application of Cryptology and Information Security, Brisbane, QLD, Australia, December 2-6, 2018, Proceedings, Part I, volume 11272 of Lecture Notes in Computer Science, pages 595-626. Springer, 2018. URL: https://doi.org/10.1007/978-3-030-03326-2_20.
  21. Clémence Bouvier, Lorenzo Grassi, Dmitry Khovratovich, Katharina Koschatko, Christian Rechberger, Fabian Schmid, and Markus Schofnegger. Skyscraper: Fast hashing on big primes. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2025(2):743-780, March 2025. URL: https://doi.org/10.46586/tches.v2025.i2.743-780.
  22. Tegan Brennan, Nicolás Rosner, and Tevfik Bultan. JIT leaks: Inducing timing side channels through just-in-time compilation. In 2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21, 2020, pages 1207-1222. IEEE, 2020. URL: https://doi.org/10.1109/SP40000.2020.00007.
  23. David Brumley and Dan Boneh. Remote timing attacks are practical. In Proceedings of the 12th USENIX Security Symposium, Washington, D.C., USA, August 4-8, 2003. USENIX Association, 2003. URL: https://www.usenix.org/conference/12th-usenix-security-symposium/remote-timing-attacks-are-practical.
  24. Stefanos Chaliasos, Jens Ernstberger, David Theodore, David Wong, Mohammad Jahanara, and Benjamin Livshits. Sok: What don't we know? understanding security vulnerabilities in snarks. In Davide Balzarotti and Wenyuan Xu, editors, 33rd USENIX Security Symposium, USENIX Security 2024, Philadelphia, PA, USA, August 14-16, 2024. USENIX Association, 2024. URL: https://www.usenix.org/conference/usenixsecurity24/presentation/chaliasos.
  25. Suresh Chari, Josyula R. Rao, and Pankaj Rohatgi. Template attacks. In Burton S. Kaliski Jr., Çetin Kaya Koç, and Christof Paar, editors, Cryptographic Hardware and Embedded Systems - CHES 2002, 4th International Workshop, Redwood Shores, CA, USA, August 13-15, 2002, Revised Papers, volume 2523 of Lecture Notes in Computer Science, pages 13-28. Springer, 2002. URL: https://doi.org/10.1007/3-540-36400-5_3.
  26. Melissa Chase, David Derler, Steven Goldfeder, Claudio Orlandi, Sebastian Ramacher, Christian Rechberger, Daniel Slamanig, and Greg Zaverucha. Post-quantum zero-knowledge and signatures from symmetric-key primitives. In Bhavani Thuraisingham, David Evans, Tal Malkin, and Dongyan Xu, editors, Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, CCS 2017, Dallas, TX, USA, October 30 - November 03, 2017, pages 1825-1842. ACM, 2017. URL: https://doi.org/10.1145/3133956.3133997.
  27. Boru Chen, Yingchen Wang, Pradyumna Shome, Christopher W Fletcher, David Kohlbrenner, Riccardo Paccagnella, and Daniel Genkin. Gofetch: Breaking constant-time cryptographic implementations using data memory-dependent prefetchers. In Proc. USENIX Secur. Symp, pages 1-21, 2024. Google Scholar
  28. Alessandro Chiesa, Yuncong Hu, Mary Maller, Pratyush Mishra, Psi Vesely, and Nicholas P. Ward. Marlin: Preprocessing zksnarks with universal and updatable SRS. In Anne Canteaut and Yuval Ishai, editors, Advances in Cryptology - EUROCRYPT 2020 - 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10-14, 2020, Proceedings, Part I, volume 12105 of Lecture Notes in Computer Science, pages 738-768. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-45721-1_26.
  29. Electric Coin. Halo2. URL: https://zcash.github.io/halo2/index.html.
  30. Christoph Dobraunig, Daniel Kales, Christian Rechberger, Markus Schofnegger, and Greg Zaverucha. Shorter signatures based on tailor-made minimalist symmetric-key crypto. In Heng Yin, Angelos Stavrou, Cas Cremers, and Elaine Shi, editors, Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, CCS 2022, Los Angeles, CA, USA, November 7-11, 2022, pages 843-857. ACM, 2022. URL: https://doi.org/10.1145/3548606.3559353.
  31. Dusk. Dusk network. URL: https://dusk.network/.
  32. Ethereum. Ethereum: A secure decentralised generalised transaction ledger. ethereum project yellow paper. URL: https://ethereum.github.io/yellowpaper/paper.pdf.
  33. Fabric. Fabric cryptography. URL: https://www.fabriccryptography.com/.
  34. ff. ff crate. URL: https://docs.rs/ff/0.13.0/ff/.
  35. Nil Foundation. Nil;’s zkevm1. URL: https://cms.nil.foundation/uploads/zk_EVM_1_7d6f8caa16.pdf.
  36. Ariel Gabizon and Zachary J. Williamson. plookup: A simplified polynomial protocol for lookup tables. IACR Cryptol. ePrint Arch., page 315, 2020. URL: https://eprint.iacr.org/2020/315.
  37. Lukas Giner, Roland Czerny, Christoph Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga, and Daniel Gruss. Generic and automated drive-by GPU cache attacks from the browser. In Jianying Zhou, Tony Q. S. Quek, Debin Gao, and Alvaro Cardenas, editors, Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, ASIA CCS 2024, Singapore, July 1-5, 2024. ACM, 2024. URL: https://doi.org/10.1145/3634737.3656283.
  38. Shafi Goldwasser, Silvio Micali, and Charles Rackoff. The knowledge complexity of interactive proof-systems (extended abstract). In Robert Sedgewick, editor, Proceedings of the 17th Annual ACM Symposium on Theory of Computing, May 6-8, 1985, Providence, Rhode Island, USA, pages 291-304. ACM, 1985. URL: https://doi.org/10.1145/22145.22178.
  39. Alexander Golovnev, Jonathan Lee, Srinath T. V. Setty, Justin Thaler, and Riad S. Wahby. Brakedown: Linear-time and field-agnostic snarks for R1CS. In Helena Handschuh and Anna Lysyanskaya, editors, Advances in Cryptology - CRYPTO 2023 - 43rd Annual International Cryptology Conference, CRYPTO 2023, Santa Barbara, CA, USA, August 20-24, 2023, Proceedings, Part II, volume 14082 of Lecture Notes in Computer Science, pages 193-226. Springer, 2023. URL: https://doi.org/10.1007/978-3-031-38545-2_7.
  40. Ben Gras, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida. Translation leak-aside buffer: Defeating cache side-channel protections with TLB attacks. In William Enck and Adrienne Porter Felt, editors, 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018, pages 955-972. USENIX Association, 2018. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/gras.
  41. Lorenzo Grassi, Dmitry Khovratovich, Reinhard Lüftenegger, Christian Rechberger, Markus Schofnegger, and Roman Walch. Reinforced concrete: A fast hash function for verifiable computation. In Heng Yin, Angelos Stavrou, Cas Cremers, and Elaine Shi, editors, Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, CCS 2022, Los Angeles, CA, USA, November 7-11, 2022, pages 1323-1335. ACM, 2022. URL: https://doi.org/10.1145/3548606.3560686.
  42. Lorenzo Grassi, Dmitry Khovratovich, Reinhard Lüftenegger, Christian Rechberger, Markus Schofnegger, and Roman Walch. Hash functions monolith for ZK applications: May the speed of SHA-3 be with you. IACR Cryptol. ePrint Arch., page 1025, 2023. URL: https://eprint.iacr.org/2023/1025.
  43. Lorenzo Grassi, Dmitry Khovratovich, Christian Rechberger, Arnab Roy, and Markus Schofnegger. Poseidon: A new hash function for zero-knowledge proof systems. In Michael D. Bailey and Rachel Greenstadt, editors, 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, pages 519-535. USENIX Association, 2021. URL: https://www.usenix.org/conference/usenixsecurity21/presentation/grassi.
  44. Lorenzo Grassi, Reinhard Lüftenegger, Christian Rechberger, Dragos Rotaru, and Markus Schofnegger. On a generalization of substitution-permutation networks: The HADES design strategy. In Anne Canteaut and Yuval Ishai, editors, Advances in Cryptology - EUROCRYPT 2020 - 39th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Zagreb, Croatia, May 10-14, 2020, Proceedings, Part II, volume 12106 of Lecture Notes in Computer Science, pages 674-704. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-45724-2_23.
  45. IAIK TU Graz. Zk friendly hash zoo. URL: https://extgit.iaik.tugraz.at/krypto/zkfriendlyhashzoo.
  46. Jens Groth. On the size of pairing-based non-interactive arguments. In Marc Fischlin and Jean-Sébastien Coron, editors, Advances in Cryptology - EUROCRYPT 2016 - 35th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Vienna, Austria, May 8-12, 2016, Proceedings, Part II, volume 9666 of Lecture Notes in Computer Science, pages 305-326. Springer, 2016. URL: https://doi.org/10.1007/978-3-662-49896-5_11.
  47. Daniel Gruss, Clémentine Maurice, and Stefan Mangard. Rowhammer.js: A remote software-induced fault attack in javascript. In Juan Caballero, Urko Zurutuza, and Ricardo J. Rodríguez, editors, Detection of Intrusions and Malware, and Vulnerability Assessment - 13th International Conference, DIMVA 2016, San Sebastián, Spain, July 7-8, 2016, Proceedings, volume 9721 of Lecture Notes in Computer Science, pages 300-321. Springer, 2016. URL: https://doi.org/10.1007/978-3-319-40667-1_15.
  48. Daniel Gruss, Clémentine Maurice, Klaus Wagner, and Stefan Mangard. Flush+flush: A fast and stealthy cache attack. In Juan Caballero, Urko Zurutuza, and Ricardo J. Rodríguez, editors, Detection of Intrusions and Malware, and Vulnerability Assessment - 13th International Conference, DIMVA 2016, San Sebastián, Spain, July 7-8, 2016, Proceedings, volume 9721 of Lecture Notes in Computer Science, pages 279-299. Springer, 2016. URL: https://doi.org/10.1007/978-3-319-40667-1_14.
  49. Ulrich Haböck. Multivariate Lookups Based on Logarithmic Derivatives. IACR Cryptol. ePrint Arch., page 1530, 2022. URL: https://eprint.iacr.org/2022/1530.
  50. Ulrich Haböck and Al Kindi. A note on adding zero-knowledge to STARKs. IACR Cryptol. ePrint Arch., page 1037, 2024. URL: https://eprint.iacr.org/2024/1037.
  51. Ulrich Haböck, David Levit, and Shahar Papini. Circle starks. IACR Cryptol. ePrint Arch., page 278, 2024. URL: https://eprint.iacr.org/2024/278.
  52. Hermez. Polygon hermez. URL: https://hermez.io/.
  53. Iden3. iden3/circomlibjs git. URL: https://github.com/iden3/circomlibjs.
  54. Iden3. iden3/ffjavascript git. URL: https://github.com/iden3/ffjavascript.
  55. Mehmet Sinan Inci, Berk Gülmezoglu, Gorka Irazoqui, Thomas Eisenbarth, and Berk Sunar. Cache attacks enable bulk key recovery on the cloud. In Benedikt Gierlichs and Axel Y. Poschmann, editors, Cryptographic Hardware and Embedded Systems - CHES 2016 - 18th International Conference, Santa Barbara, CA, USA, August 17-19, 2016, Proceedings, volume 9813 of Lecture Notes in Computer Science, pages 368-388. Springer, 2016. URL: https://doi.org/10.1007/978-3-662-53140-2_18.
  56. Ingonyama. Ingonyama. URL: https://www.ingonyama.com/.
  57. Ingonyama. ingonyama-zk/poseidon-hash git. URL: https://github.com/ingonyama-zk/poseidon-hash.
  58. Intel. Guidelines for mitigating timing side channels against cryptographic implementations. URL: https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/secure-coding/mitigate-timing-side-channel-crypto-implementation.html.
  59. Intel. Security best practices for side channel resistance. URL: https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/secure-coding/security-best-practices-side-channel-resistance.html.
  60. Aniket Kate, Gregory M. Zaverucha, and Ian Goldberg. Constant-size commitments to polynomials and their applications. In Masayuki Abe, editor, Advances in Cryptology - ASIACRYPT 2010 - 16th International Conference on the Theory and Application of Cryptology and Information Security, Singapore, December 5-9, 2010. Proceedings, volume 6477 of Lecture Notes in Computer Science, pages 177-194. Springer, 2010. URL: https://doi.org/10.1007/978-3-642-17373-8_11.
  61. Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, and Yuval Yarom. Spectre attacks: exploiting speculative execution. Commun. ACM, 63(7):93-101, 2020. URL: https://doi.org/10.1145/3399742.
  62. Paul C. Kocher. Timing attacks on implementations of diffie-hellman, rsa, dss, and other systems. In Neal Koblitz, editor, Advances in Cryptology - CRYPTO '96, 16th Annual International Cryptology Conference, Santa Barbara, California, USA, August 18-22, 1996, Proceedings, volume 1109 of Lecture Notes in Computer Science, pages 104-113. Springer, 1996. URL: https://doi.org/10.1007/3-540-68697-5_9.
  63. Paul C. Kocher, Joshua Jaffe, and Benjamin Jun. Differential power analysis. In Michael J. Wiener, editor, Advances in Cryptology - CRYPTO '99, 19th Annual International Cryptology Conference, Santa Barbara, California, USA, August 15-19, 1999, Proceedings, volume 1666 of Lecture Notes in Computer Science, pages 388-397. Springer, 1999. URL: https://doi.org/10.1007/3-540-48405-1_25.
  64. Lurk Lab. lurk-lab/neptune git. URL: https://github.com/lurk-lab/neptune.
  65. Light Protocol Labs. Light protocol. URL: https://docs.lightprotocol.com/.
  66. Matter Labs. Matter labs. URL: https://matter-labs.io/.
  67. Matter Labs. matter-labs/rescue-poseidon git. URL: https://github.com/matter-labs/rescue-poseidon.
  68. Mysten Labs. mystenlabs/sui git. URL: https://github.com/MystenLabs/sui.
  69. O1 Labs. o1-labs/proof-systems git. URL: https://github.com/o1-labs/proof-systems.
  70. Polygon Labs. 0xpolygonzero/plonky2 git. URL: https://github.com/0xPolygonZero/plonky2.
  71. Polygon Labs. Plonky3/plonky3 git. URL: https://github.com/Plonky3/Plonky3.
  72. Protocl Labs. Filecoin. URL: https://filecoin.io/filecoin.pdf.
  73. Jonathan Lee. Dory: Efficient, transparent arguments for generalised inner products and polynomial commitments. In Kobbi Nissim and Brent Waters, editors, Theory of Cryptography - 19th International Conference, TCC 2021, Raleigh, NC, USA, November 8-11, 2021, Proceedings, Part II, volume 13043 of Lecture Notes in Computer Science, pages 1-34. Springer, 2021. URL: https://doi.org/10.1007/978-3-030-90453-1_1.
  74. Libgcrypt. Libgcrypt. URL: https://gnupg.org/software/libgcrypt/index.html.
  75. Moritz Lipp, Andreas Kogler, David Oswald, Michael Schwarz, Catherine Easdon, Claudio Canella, and Daniel Gruss. PLATYPUS: Software-based Power Side-Channel Attacks on x86. In 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 2021. Google Scholar
  76. Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg. Meltdown: Reading kernel memory from user space. In William Enck and Adrienne Porter Felt, editors, 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018, pages 973-990. USENIX Association, 2018. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/lipp.
  77. Fangfei Liu, Yuval Yarom, Qian Ge, Gernot Heiser, and Ruby B. Lee. Last-level cache side-channel attacks are practical. In 2015 IEEE Symposium on Security and Privacy, SP 2015, San Jose, CA, USA, May 17-21, 2015, pages 605-622. IEEE Computer Society, 2015. URL: https://doi.org/10.1109/SP.2015.43.
  78. Loopring. Loopring. URL: https://loopring.org/#/.
  79. Lurk. Lurk. URL: https://lurk-lang.org/.
  80. Mary Maller, Sean Bowe, Markulf Kohlweiss, and Sarah Meiklejohn. Sonic: Zero-knowledge snarks from linear-size universal and updatable structured reference strings. In Lorenzo Cavallaro, Johannes Kinder, XiaoFeng Wang, and Jonathan Katz, editors, Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019, London, UK, November 11-15, 2019, pages 2111-2128. ACM, 2019. URL: https://doi.org/10.1145/3319535.3339817.
  81. Stefan Mangard, Elisabeth Oswald, and Thomas Popp. Power analysis attacks - revealing the secrets of smart cards. Springer, 2007. Google Scholar
  82. Thomas S. Messerges, Ezzy A. Dabbish, and Robert H. Sloan. Power analysis attacks of modular exponentiation in smartcards. In Çetin Kaya Koç and Christof Paar, editors, Cryptographic Hardware and Embedded Systems, First International Workshop, CHES'99, Worcester, MA, USA, August 12-13, 1999, Proceedings, volume 1717 of Lecture Notes in Computer Science, pages 144-157. Springer, 1999. URL: https://doi.org/10.1007/3-540-48059-5_14.
  83. mhostetter. galois git. URL: https://github.com/mhostetter/galois.
  84. Mina. Mina protocol. URL: https://docs.minaprotocol.com/assets/technicalWhitepaper.pdf.
  85. Ahmad Moghimi, Jan Wichelmann, Thomas Eisenbarth, and Berk Sunar. Memjam: A false dependency attack against constant-time crypto implementations. Int. J. Parallel Program., 47(4):538-570, 2019. URL: https://doi.org/10.1007/S10766-018-0611-9.
  86. Monero. The monero project. URL: https://www.getmonero.org/.
  87. NSS. Nss. URL: https://github.com/nss-dev/nss.
  88. OpenJDK. openjdk/jdk git. URL: https://github.com/openjdk/jdk/tree/master.
  89. openSSL. openssl. URL: https://www.openssl.org/.
  90. Dag Arne Osvik, Adi Shamir, and Eran Tromer. Cache attacks and countermeasures: The case of AES. In David Pointcheval, editor, Topics in Cryptology - CT-RSA 2006, The Cryptographers' Track at the RSA Conference 2006, San Jose, CA, USA, February 13-17, 2006, Proceedings, volume 3860 of Lecture Notes in Computer Science, pages 1-20. Springer, 2006. URL: https://doi.org/10.1007/11605805_1.
  91. Panther. Panther protocol. URL: https://www.pantherprotocol.io/.
  92. Luke Pearson, Joshua Brian Fitzgerald, Héctor Masip, Marta Bellés-Muñoz, and Jose Luis Muñoz-Tapia. Plonkup: Reconciling plonk with plookup. IACR Cryptol. ePrint Arch., page 86, 2022. URL: https://eprint.iacr.org/2022/086.
  93. Polygon. Polygon miden technologies. URL: https://polygon.technology/polygon-miden.
  94. Polygon. Polygon technologies. URL: https://polygon.technology/.
  95. Light Protocol. Lightprotocol/light-poseidon git. URL: https://github.com/Lightprotocol/light-poseidon.
  96. Light Protocol. Lightprotocol/light-protocol git. URL: https://github.com/Lightprotocol/light-protocol.
  97. Panther Protocol. pantherprotocol/panther-core git. URL: https://github.com/pantherprotocol/panther-core.
  98. Mark Randolph and William Diehl. Power side-channel attack analysis: A review of 20 years of study for the layman. Cryptogr., 4(2):15, 2020. URL: https://doi.org/10.3390/CRYPTOGRAPHY4020015.
  99. RISCZero. Risczero. URL: https://www.risczero.com/.
  100. Scroll. Scroll. URL: https://scroll.io/.
  101. Semaphore. Semaphore. URL: https://semaphore.pse.dev/whitepaper-v1.pdf.
  102. Srinath T. V. Setty. Spartan: Efficient and general-purpose zksnarks without trusted setup. In Daniele Micciancio and Thomas Ristenpart, editors, Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, CRYPTO 2020, Santa Barbara, CA, USA, August 17-21, 2020, Proceedings, Part III, volume 12172 of Lecture Notes in Computer Science, pages 704-737. Springer, 2020. URL: https://doi.org/10.1007/978-3-030-56877-1_25.
  103. Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin, Yossi Oren, and Yuval Yarom. Prime+probe 1, javascript 0: Overcoming browser-based side-channel defenses. In Michael D. Bailey and Rachel Greenstadt, editors, 30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, pages 2863-2880. USENIX Association, 2021. URL: https://www.usenix.org/conference/usenixsecurity21/presentation/shusterman.
  104. Sia. Sia. URL: https://sia.tech/sia.pdf.
  105. Florian Sieck, Zhiyuan Zhang, Sebastian Berndt, Chitchanok Chuengsatiansup, Thomas Eisenbarth, and Yuval Yarom. Teejam: Sub-cache-line leakages strike back. IACR Trans. Cryptogr. Hardw. Embed. Syst., 2024(1):457-500, 2024. URL: https://doi.org/10.46586/TCHES.V2024.I1.457-500.
  106. Solana. Solana. URL: https://solana.com/.
  107. Sovrin. Sovrin. URL: https://sovrin.org/.
  108. Starkware. Starkware. URL: https://starkware.co/.
  109. Storj. Storj. URL: https://www.storj.io/storjv3.pdf.
  110. Sui. Sui. URL: https://sui.io/zklogin.
  111. Supranational. Supra national. URL: https://www.supranational.net/.
  112. Swarm. Swarm. URL: https://www.ethswarm.org/swarm-whitepaper.pdf.
  113. Alan Szepieniec, Alexander Lemmens, Jan Ferdinand Sauer, and Bobbin Threadbare. The tip5 hash function for recursive starks. IACR Cryptol. ePrint Arch., page 107, 2023. URL: https://eprint.iacr.org/2023/107.
  114. Florian Tramèr, Dan Boneh, and Kenny Paterson. Remote side-channel attacks on anonymous transactions. In Srdjan Capkun and Franziska Roesner, editors, 29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, pages 2739-2756. USENIX Association, 2020. URL: https://www.usenix.org/conference/usenixsecurity20/presentation/tramer.
  115. Eran Tromer, Dag Arne Osvik, and Adi Shamir. Efficient cache attacks on aes, and countermeasures. J. Cryptol., 23(1):37-71, 2010. URL: https://doi.org/10.1007/S00145-009-9049-Y.
  116. Tusima. Tusima. URL: https://www.tusima.network/.
  117. Stephan van Schaik, Cristiano Giuffrida, Herbert Bos, and Kaveh Razavi. Malicious management unit: Why stopping cache attacks in software is harder than you think. In William Enck and Adrienne Porter Felt, editors, 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018, pages 937-954. USENIX Association, 2018. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/van-schaik.
  118. Vimwitch. poseidon-lite git. URL: https://github.com/vimwitch/poseidon-lite.
  119. Samuel Weiser, Andreas Zankl, Raphael Spreitzer, Katja Miller, Stefan Mangard, and Georg Sigl. DATA - differential address trace analysis: Finding address-based side-channels in binaries. In William Enck and Adrienne Porter Felt, editors, 27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018, pages 603-620. USENIX Association, 2018. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/weiser.
  120. Witnerfell. Winterfell git. URL: https://github.com/facebook/winterfell/tree/main.
  121. Tiancheng Xie, Yupeng Zhang, and Dawn Song. Orion: Zero knowledge proof with linear prover time. In Yevgeniy Dodis and Thomas Shrimpton, editors, Advances in Cryptology - CRYPTO 2022 - 42nd Annual International Cryptology Conference, CRYPTO 2022, Santa Barbara, CA, USA, August 15-18, 2022, Proceedings, Part IV, volume 13510 of Lecture Notes in Computer Science, pages 299-328. Springer, 2022. URL: https://doi.org/10.1007/978-3-031-15985-5_11.
  122. Yuval Yarom and Katrina Falkner. FLUSH+RELOAD: A high resolution, low noise, L3 cache side-channel attack. In Kevin Fu and Jaeyeon Jung, editors, Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014, pages 719-732. USENIX Association, 2014. URL: https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/yarom.
  123. Yuval Yarom, Daniel Genkin, and Nadia Heninger. Cachebleed: A timing attack on openssl constant time RSA. In Benedikt Gierlichs and Axel Y. Poschmann, editors, Cryptographic Hardware and Embedded Systems - CHES 2016 - 18th International Conference, Santa Barbara, CA, USA, August 17-19, 2016, Proceedings, volume 9813 of Lecture Notes in Computer Science, pages 346-367. Springer, 2016. URL: https://doi.org/10.1007/978-3-662-53140-2_17.
  124. Zcash. Zcash protocol specification. URL: https://zips.z.cash/protocol/protocol.pdf.
  125. ZK-kit. Zk-kit. URL: https://zkkit.pse.dev/.
  126. zk kit. zk-kit git. URL: https://github.com/privacy-scaling-explorations/zk-kit.
  127. ZKsync. Zksync. URL: https://zksync.io/.
Any Issues?
X

Feedback on the Current Page

CAPTCHA

Thanks for your feedback!

Feedback submitted to Dagstuhl Publishing

Could not send message

Please try again later or send an E-mail
© 2023-2025 Schloss Dagstuhl – LZI GmbH About DROPS Imprint Privacy Contact