J. Casey Wilson

Proofs of Nothing: Zero-Witness Forgeries and the Side Conditions That Prevent Them

A lattice proof verifier is sound only if it binds the proof to a fixed statement the prover cannot choose. We report a post-quantum consensus verifier that does not, and accepts a proof of nothing. In a confidential-transaction opcode, an all-zero proof whose only nonzero field...

Proofs of Nothing: Zero-Witness Forgeries and the Side Conditions That Prevent Them

A lattice proof verifier is sound only if it binds the proof to a fixed statement the prover cannot choose. We report a post-quantum consensus verifier that does not, and accepts a proof of nothing. In a confidential-transaction opcode, an all-zero proof whose only nonzero field...