Our crypto experts answer 10 key questions

Summary: Trail of Bits cryptography experts answer ten questions covering polynomial commitment schemes (KZG, FRI, Pedersen/IPA), Merkle-Damgard versus sponge hash constructions, theoretical ECC attacks like Weil descent and the MOV attack, lattice- and isogeny-based post-quantum cryptography, the Fiat-Shamir transform, PLONK variants, and the four types of zkEVMs. The post notes that supersingular isogeny-based Diffie-Hellman key exchange is subject to a key recovery attack that does not require a quantum computer and is therefore insecure, and that KZG commitments require a trusted setup whose parameter must be deleted or anyone can forge proofs.
Why it matters: The post flags that even minor misconfigurations in the Fiat-Shamir transform can let a malicious prover forge proofs, and that a KZG trusted setup parameter left undeleted lets anyone forge proofs - two implementation details where a single oversight undermines the whole system.

Read the original at Trail of Bits Blog ↗