Secure aggregation requires operating on private inputs while preserving confidentiality, verifying that each input satisfies constraints, and avoiding trusted parties. This scheme appears in federated learning, as well as Internet of Things, operational technology, blockchain, smart-grid, and voting deployments. Existing protocols achieve at most two of these requirements. We present zk-DEAP, a protocol combining lifted ElGamal homomorphic encryption, FROST threshold cryptography, and zero-knowledge proofs (Bulletproofs, zk-SNARKs, or zk-STARKs) for fully decentralized, verifiable, privacy-preserving aggregation.Our core technical contribution is a cryptographic binding mechanism preventing substitution attacks, where a valid proof for one input is paired with a ciphertext encrypting a different, malicious value. For Bulletproofs, we bind via ciphertext-derived randomness modification. For zk-SNARKs/zk-STARKs, to bind across algebraic structures, a well-known challenge in practical cryptography, we introduce a sophisticated blinded arithmetic hash commitment with an embedded Schnorr constraint, forcing the ZKP's private witness to equal the encrypted value, ensuring any circuit-verified constraint applies to the ciphertext.We implement three production-ready, defense-in-depth variants in Rust and evaluate across 5-500 participants on Azure VMs. Compared to unverified aggregation, zk-DEAP adds modest overhead while providing cryptographic guarantees against input manipulation that statistical defenses cannot match. Results show Bulletproofs, despite limited flexibility, achieve the fastest proof generation, while zk-STARKs provide post-quantum security with larger sizes, and zk-SNARKs achieve a middle ground.
Secure aggregation requires operating on private inputs while preserving confidentiality, verifying that each input satisfies constraints, and avoiding trusted parties. This scheme appears in federated learning, as well as Internet of Things, operational technology, blockchain, smart-grid, and voting deployments. Existing protocols achieve at most two of these requirements. We present zk-DEAP, a protocol combining lifted ElGamal homomorphic encryption, FROST threshold cryptography, and zero-knowledge proofs (Bulletproofs, zk-SNARKs, or zk-STARKs) for fully decentralized, verifiable, privacy-preserving aggregation.Our core technical contribution is a cryptographic binding mechanism preventing substitution attacks, where a valid proof for one input is paired with a ciphertext encrypting a different, malicious value. For Bulletproofs, we bind via ciphertext-derived randomness modification. For zk-SNARKs/zk-STARKs, to bind across algebraic structures, a well-known challenge in practical cryptography, we introduce a sophisticated blinded arithmetic hash commitment with an embedded Schnorr constraint, forcing the ZKP's private witness to equal the encrypted value, ensuring any circuit-verified constraint applies to the ciphertext.We implement three production-ready, defense-in-depth variants in Rust and evaluate across 5-500 participants on Azure VMs. Compared to unverified aggregation, zk-DEAP adds modest overhead while providing cryptographic guarantees against input manipulation that statistical defenses cannot match. Results show Bulletproofs, despite limited flexibility, achieve the fastest proof generation, while zk-STARKs provide post-quantum security with larger sizes, and zk-SNARKs achieve a middle ground.