Affiliation:
1. Department of Semantics, Cybersecurity & Services, University of Twente, 7522 NB Enschede, The Netherlands
Abstract
This study builds on our previous systematic literature review (SLR) that assessed the applications and performance of zk-SNARK, zk-STARK, and Bulletproof non-interactive zero-knowledge proof (NIZKP) protocols. To address the identified research gaps, we designed and implemented a benchmark comparing these three protocols using a dynamic minimized multiplicative complexity (MiMC) hash application. We evaluated performance across four general-purpose programming libraries and two programming languages. Our results show that zk-SNARK produced the smallest proofs, while zk-STARK generated the largest. In terms of proof generation and verification times, zk-STARK was the fastest, and Bulletproof was the slowest. Interestingly, zk-SNARK proofs verified marginally faster than zk-STARK, contrary to other findings. These insights enhance our understanding of the functionality, security, and performance of NIZKP protocols, providing valuable guidance for selecting the most suitable protocol for specific applications.
Reference51 articles.
1. The Knowledge Complexity of Interactive Proof Systems;Goldwasser;Roviding Sound Foundations for Cryptography: On the Work of Shafi Goldwasser and Silvio Micali,2019
2. Blum, M., Feldman, P., and Micali, S. (1988, January 2–4). Non-Interactive Zero-Knowledge and Its Applications. Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing, STOC ’88, Chicago, IL, USA.
3. Biryukov, A., Feher, D., and Vitto, G. (2019, January 11–15). zkChannels: Privacy-Preserving Off-Chain Payments for Decentralized Economies. Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, London, UK.
4. Preserving privacy in ethereum blockchain;Kumar;Ann. Data Sci.,2022
5. Oude Roelink, B., El-Hajj, M., and Sarmah, D. (2024). Systematic review: Comparing zk-SNARK, zk-STARK, and bulletproof protocols for privacy-preserving authentication. Secur. Priv., e401.