ZK BIP32 derivation proofs, post-quantum and client-side 🤤
An excellent example of what Binius64 is great at, and a potential practical answer for one of the harder questions a chain’s post quantum migration must answer - how do you prove a coin is yours once a quantum attacker can forge the same signature?
Instead of signing some message to prove an address is yours, you prove you know how it was derived instead. Signatures don’t survive quantum computers but hashes do and derivation is all about hashes.
It’s also super fast; ~240ms proof gen, ~40ms verification, on a laptop, CPU only. Faster than previous work by 16x.
And the only security assumption is SHA-256.
Pleasure working with
@jimpo_potamus on this.