Fiat-Shamir Bulletproofs are Non-Malleable (in the Random Oracle Model)

ePrint Report: Fiat-Shamir Bulletproofs are Non-Malleable (in the Random Oracle Model)

Chaya Ganesh, Claudio Orlandi, Mahak Pancholi, Akira Takahashi, Daniel Tschudi

Bulletproofs (Bünz et al. IEEE S&P 2018) are a celebrated ZK proof system that allows for short and efficient proofs, and have been implemented and deployed in several real-world systems. In practice, they are most often implemented in their non-interactive version obtained using the Fiat-Shamir transform. A security proof for this setting is necessary for ruling out malleability attacks. …

amp chaya daniel eprint report ieee non oracle practice random report security system systems version world