2026· Proceedings of the 23rd International Conference on Security and Cryptography· pp. 317-324· 0 citations· 31 references
TL;DR
PEACE is presented, an authentication mechanism for blockchains that combines the practicality of traditional Web systems with decentralization and privacy-preservation, building on a recent groundbreaking zkLogin protocol.
Abstract
: As blockchains gain traction in managing financial assets, robust authentication mechanisms become essential. Traditional public-private key authentication poses risks of key mismanagement, leading to significant financial losses. At the same time, in the non-blockchain context, systems like OpenID Connect (OIDC) provide user-friendly authentication with identity recovery in the traditional Web. However, they rely on a single trusted party, raising privacy concerns when applied to blockchains. In this paper, we present PEACE , an authentication mechanism for blockchains that combines the practicality of traditional Web systems with decentralization and privacy-preservation, building on a recent groundbreaking zkLogin protocol of Baldimtsi et al. (ACM CCS 2024). The protocol frees users from managing cryptographic material without giving away fund custody or relying on a single party. We detail PEACE ’s design, prove its properties in the Universal Composability framework, and present a real-world implementation compatible with existing OIDC deployments and the Ethereum blockchain.
Redactable blockchains support legitimate on-chain data modifications for regulatory compliance and controlled data management. Existing constructions often rely on a trusted central authority (CA), introducing a key escrow problem and a single point of failure. Decentralized extensions mitigate these issues by distributing the role of the CA among multiple parties, but they incur two major drawbacks: 1) the authorization of rewriting privileges requires a modifier to interact with multiple authorities, bringing substantial communication costs; and 2) the existing decentralized schemes only guarantee security under a weak static model, which requires the adversary to commit all queries in advance and fails to capture realistic adversarial behaviors. In this paper, we propose a new redactable blockchain design that minimizes communication cost, eliminates key escrow, and provides stronger security guarantees. Our solution retains a centralized architecture to significantly reduce the communication cost compared to decentralized designs. Moreover, the CA does not possess or issue secret keys to the modifiers for performing rewriting operations, thereby eliminating the key escrow problem. To enable a generic design with rigorous security analysis, we introduce a cryptographic primitive, registered policy-based chameleon hash (RPCH), and formalize three security models that capture realistic adversarial capabilities. We propose a generic construction of RPCH accompanied by formal security proofs. Based on this framework, we present two concrete instantiations. The first is optimized for efficiency, leveraging a prime-order group and achieving selective security. The second prioritizes security guarantees by attaining adaptive security in a composite-order setting. To evaluate performance, we implement and compare our construction against both the classic PCH-based scheme and the state-of-the-art decentralized variant. Extensive experiments demonstrate that our approach achieves a strong balance between security and efficiency, and is particularly well-suited for redactable blockchain applications where only a small fraction of users are authorized to perform modifications.
Shengmin Xu, Xianxin Zhao, Xiaoguo Li et al.· IEEE Transactions on Informa...· 0 citations
This research presents a novel decentralized identity management system leveraging Ethereum smart contracts and cryptographic protocols to enable self-sovereign digital identities. Traditional centralized identity solutions pose risks related to data privacy, security, and user autonomy. To address these limitations, we propose a blockchain-based architecture integrating smart contracts for identity governance, IPFS for decentralized attribute storage, and threshold cryptography for private data recovery. Our dual-contract model (Identity Contract and Recovery Contract) facilitates secure identity creation, verifiable attribute attestation, and robust key recovery through social consensus. We introduce a privacy-preserving mechanism using encryption-key splitting among trusted peers to enable recovery of encrypted off-chain data. Implementation uses Web3.js, Solidity, and QR-code-based communication, abstracting cryptographic complexities from end-users. Security analysis addresses replay, man-in-the-middle, Sybil, and multi-user compromise attacks with mitigations including challenge-response authentication and time-delayed contract execution. This work contributes a cryptographically secure, user-centric identity framework ensuring data sovereignty, recoverability, and interoperability within the Ethereum ecosystem.
Harika Naidu Beesabathuni· International Journal of Int...· 0 citations
This research introduces a novel Unified Quantum-Resilient Blockchain-Zero Knowledge Proofs Privacy Authentication Framework (QBC-ZKPAF), which provides strong security and privacy solutions for Internet of Things networks by adopting multi-factor authentication and decentralizing identity management.
Uzma Shereen, Lubna Nausheen· American Journal of AI Cyber...· 0 citations
Redactable blockchain, which provides decentralization, traceability, and transparency while permitting permitted changes to on-chain data, has become a promising technology in recent years. Despite their benefits, existing redactable blockchain systems are limited in their practical use by issues including significant communication overhead and data privacy breaches. This study presents PriChain, a fine-grained redactable blockchain technology for decentralized contexts that preserves privacy in order to address these problems. PriChain gives data owners the authority to manage who may access and alter their on-chain data, guaranteeing that redaction can only be carried out by authorized users while maintaining data confidentiality. Through the use of attributebased encryption with several authorities, PriChain guarantees resistance to unwanted cooperation or collusion and permits exact access control. When compared to traditional techniques, the framework dramatically lowers communication and storage overhead. PriChain is a reliable and useful option for blockchain applications that prioritize privacy as security analysis demonstrates that it is impervious to chosen-plaintext attacks.
S. Kulsum, CH Dr.LalithaSaroja, Ruqiya Fatima· American Journal of AI Cyber...· 0 citations
Given that digital governance has achieved extensive spread and people rely increasingly on online services, affordable and trustworthy identity management is now one of the core pillars of contemporary e-Governance systems. Conventional identity systems are usually centralized, highly susceptible to cyber-attacks and most likely to breach privacy. Blockchain technology provides a decentralized, tamper-proof, and transparent system, which guarantees data integrity, data security, and the privacy of the user. In this paper, the authors research the adoption of blockchain-based identity management within e-Governance sites. We discuss available solutions, assess the risks along with their weaknesses and strengths, and suggest a design on how to introduce a safe blockchain-based identity system. Important efforts have been on developing a holistic system that brings smart contract, cryptographic protocols and distributed ledger technologies together to make citizen identification and authentication secure. The outcome of the results shows enhanced security, less identity fraud, and better data security, so there is a possibility of scalability and resilient e-Governance applications.
J. Nováková, Adi Lestari· International Journal of Mod...· 0 citations
This paper introduces Data Communities as a novel paradigm for privacy-preserving, blockchain-enabled cooperative digital infrastructures, formalized within the Cooperative Digital Infrastructure (CDI) framework and formalizes privacy guarantees through an adversarial model encompassing classical, quantum, insider, and governance-level threats.
