New Developments in Multilinear Maps: Zeroizing Attacks, Defenses, and Post-Zeroizing Obfuscation

on YouTube ↗01h 09m

" summary

Shows how a family of CLT graded encodings yields a zeroizing attack that multiplies selected low‑level encodings into top‑level zeros, assembles an integer matrix W from zero tests, recovers CRT‑component ratios by eigenvalue computation and uses those ratios to factor the public modulus x0. Defenses change zero testing to work modulo an independently chosen large prime n, search for a multiplier pzt via a short‑vector lattice step (LLL‑style) exploiting CRT structure, and ships a working CLT15 prototype.

AI-written summary · about

" chapters (12)

1. 0:00Start
2. 6:18A brief history of GES candidates candidate using ideal lattices
3. 14:14[CLT13]: overview
4. 18:50[CLT13]: zero-test
5. 20:57The zero test in action
6. 28:56The [CHLRS15] attack
7. 45:04no low-level zeros
8. 45:47Extension #3: matrix encodings
9. 47:32How could we thwart the Cheon et al. attack?
10. 49:14An approach that didn't work out
11. 52:48[CLT15] in a nutshell
12. 54:06CLT encodings over Z Level- encoding

" related talks

• 01h 07mLattices and Encrypted ComputationVinod Vaikuntanathan · Lattices: Algorithms, Complexity, and Cryptography Boot Camp 2020
• 44mBilinear Pairings-based Zero-Knowledge ProofsJens Groth · 2nd ZKProof Workshop 2019
• 37mUsing Zero to Attack Zero-Knowledge Proof (ZKP) PLONKQuan Thoi Minh Nguyen · Black Hat Asia 2022
• 35mEfficient Zero Knowledge Protocols: The Modular ApproachYuval Ishai · 2nd ZKProof Workshop 2019
• 01h 06mOn the Assumptions Used for ObfuscationBenny Applebaum · Simons Institute Workshop: New Developments in Obfuscation
• 52mDiscrete Log based Zero-Knowledge ProofsDan Boneh · 2nd ZKProof Workshop 2019
• 22mScalable Zero-Knowledge Protocols From Vector-OLEPeter Scholl · 4th ZKProof Workshop (Home Edition)
• 40mPost-QuantumJames Howe, Thomas Prest, Thijs Laarhoven, Corentin Jeudy · RSAC 2021