Security of Fiat-Shamir transformation
Duration: 00:26:33
Speaker: Michal Zajac
Type: Talk
Expertise: Intermediate
Event: Devcon
Date: Nov 2024
Fiat-Shamir transformation underlies virtually every SNARK used in the Ethereum ecosystem as it makes interactive proofs non-interactive. In this talk, we discuss the security issues if the transformation is used incorrectly (e.g., parallel repetition of a ZKP defined over a small field; such protocols became very popular thanks to their efficiency), provide examples, show the security loss that the transformation brings, and the concrete security of ZKP. Finally, we discuss best practices for k