Presentation
ZK-Hammer: Leaking Secrets from Zero-Knowledge Proofs via Rowhammer
DescriptionZero-knowledge succinct non-interactive arguments of knowledge (zk-SNARK) schemes have been a promising technique in verified computation. Zk-SNARK schemes were designed to be mathematically secure against cryptographic attacks and it remains unclear whether they are vulnerable to fault injection attacks. In this work, we provide a positive answer by presenting ZK-Hammer, which leaks secrets from zk-SNARK schemes via Rowhammer. We incur faults in the exponentiate variables in the Quadratic Arithmetic Program (QAP) problem. Then we analyze the faulty proof using the bilinear pairing technique and manage to recover the secret. We employ a Rowhammer fault evaluation in _libsnark_ and identify 3 CVEs.
Event Type
Research Manuscript
TimeMonday, June 2311:00am - 11:15am PDT
Location3003, Level 3
Security
SEC3: Hardware Security: Attack & Defense