From 4c767dd09bf5bf0cd0a50c42cb0bb7bf028cbb9e Mon Sep 17 00:00:00 2001 From: ethsystems-bot <321619048+ethsystems-bot@users.noreply.github.com> Date: Tue, 15 Sep 2026 05:06:36 +0000 Subject: [PATCH 1/2] docs(pattern): add Beasley lattice VOPRF preprint to vOPRF Nullifiers Adds one See also bullet pointing at ePrint 2026/2010 (Li, Wang, Zhang), an implemented round-optimal, maliciously secure lattice VOPRF over MLWE/MSIS, as a candidate post-quantum replacement for the DDH-based construction this pattern describes. Notes the reported benchmarks and the two caveats that matter here: per-evaluation bandwidth and the single-server (non-threshold) setting. --- CHANGELOG.md | 1 + patterns/pattern-voprf-nullifiers.md | 1 + 2 files changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 155b7ce..bef6a19 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -17,6 +17,7 @@ All notable changes to the EthSystems Map are documented here. - feat(approach): link private-stocks, private-commodities, private-fx, and private-repo to [Private Trade Settlement](approaches/approach-private-trade-settlement.md), and private-treasuries to [Private Payments](approaches/approach-private-payments.md), as explicit variants ([#190](https://github.com/ethsystems/map/pull/190), part of [#138](https://github.com/ethsystems/map/issues/138)) - feat(pattern): add [CMTAT](https://cmta.ch/standards/cmta-token-cmtat) as an alternative to ERC-3643 in [ERC-3643 Tokenized RWAs](patterns/pattern-erc3643-rwa.md), a blockchain-agnostic compliant-tokenization standard with an Aztec/Noir privacy-preserving implementation, cross-referenced in GLOSSARY.md and [Private RWA Tokenization](use-cases/private-rwa-tokenization.md) ([#190](https://github.com/ethsystems/map/pull/190), closes [#174](https://github.com/ethsystems/map/issues/174)) - feat(vendor): [Gateway Open Privacy Suite](vendors/gateway-open-privacy-suite.md) — governed JSON-RPC access, selective disclosure, and compliance controls for private EVM networks and Gateway L2/validium deployments ([#189](https://github.com/ethsystems/map/pull/189)) +- docs: add the [Beasley](https://eprint.iacr.org/2026/2010) preprint to the [vOPRF Nullifiers](patterns/pattern-voprf-nullifiers.md) `## See also` section, an implemented lattice VOPRF and candidate post-quantum replacement for the DDH construction - docs: add Espalier preprint reference to [ZK Proof Systems](patterns/pattern-zk-proof-systems.md), [Post-Quantum Threats](domains/post-quantum.md), and [Safe Proof Delegation](patterns/pattern-safe-proof-delegation.md) `## See also` sections - feat(jurisdiction): [Indonesia / OJK (Digital Financial Assets)](jurisdictions/id-OJK.md) and [Singapore / MAS](jurisdictions/sg-MAS.md) -- adds ASEAN coverage, including the POJK 27/2024 listing criterion that bars assets whose features conceal ownership or transaction information ([#182](https://github.com/ethsystems/map/pull/182)) - feat(jurisdiction): [EU / EUDR (Deforestation Regulation)](jurisdictions/eu-EUDR.md) -- Article 9 plot-level geolocation and the DDS reference-number model, ahead of the 30 December 2026 application date ([#181](https://github.com/ethsystems/map/pull/181)) diff --git a/patterns/pattern-voprf-nullifiers.md b/patterns/pattern-voprf-nullifiers.md index faeb4e7..15b65ba 100644 --- a/patterns/pattern-voprf-nullifiers.md +++ b/patterns/pattern-voprf-nullifiers.md @@ -105,3 +105,4 @@ A KYC issuer gives a user a credential with an internal credential identifier. A - [RFC 9576 (Privacy Pass Architecture)](https://www.rfc-editor.org/rfc/rfc9576.html) - [TACEO vOPRF writeup](https://core.taceo.io/articles/taceo-oprf/) - [TACEO Merces vendor page](../vendors/taceo-merces.md) +- [Beasley (Li, Wang, Zhang, ePrint 2026/2010)](https://eprint.iacr.org/2026/2010): an implemented round-optimal, maliciously secure lattice VOPRF over MLWE/MSIS, and a candidate post-quantum replacement for the DDH-based construction above. It follows the ADDS21/LeOPaRd blueprint, a lattice analog of 2HashDH, with a generalized BLMR13 PRF that consumes 4 input bits per step and ring-switching sumcheck proofs in place of LaBRADOR; the authors report 520 ms to produce the client request and its NIZK proof, 15.3 ms server verification, and 109 KB of client communication (75.4 KB proof) on one AVX2 core. Round-optimality preserves the single round trip of the protocol above, but per-evaluation bandwidth is orders of magnitude above the elliptic-curve construction, and the paper benchmarks a single-server VOPRF rather than the threshold committee this pattern assumes. From f91c8791cca0354da7b2f02c77e703b16b10400d Mon Sep 17 00:00:00 2001 From: ethsystems-bot <321619048+ethsystems-bot@users.noreply.github.com> Date: Tue, 15 Sep 2026 05:08:56 +0000 Subject: [PATCH 2/2] docs(pattern): shorten the Beasley bullet to two sentences --- patterns/pattern-voprf-nullifiers.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patterns/pattern-voprf-nullifiers.md b/patterns/pattern-voprf-nullifiers.md index 15b65ba..9598109 100644 --- a/patterns/pattern-voprf-nullifiers.md +++ b/patterns/pattern-voprf-nullifiers.md @@ -105,4 +105,4 @@ A KYC issuer gives a user a credential with an internal credential identifier. A - [RFC 9576 (Privacy Pass Architecture)](https://www.rfc-editor.org/rfc/rfc9576.html) - [TACEO vOPRF writeup](https://core.taceo.io/articles/taceo-oprf/) - [TACEO Merces vendor page](../vendors/taceo-merces.md) -- [Beasley (Li, Wang, Zhang, ePrint 2026/2010)](https://eprint.iacr.org/2026/2010): an implemented round-optimal, maliciously secure lattice VOPRF over MLWE/MSIS, and a candidate post-quantum replacement for the DDH-based construction above. It follows the ADDS21/LeOPaRd blueprint, a lattice analog of 2HashDH, with a generalized BLMR13 PRF that consumes 4 input bits per step and ring-switching sumcheck proofs in place of LaBRADOR; the authors report 520 ms to produce the client request and its NIZK proof, 15.3 ms server verification, and 109 KB of client communication (75.4 KB proof) on one AVX2 core. Round-optimality preserves the single round trip of the protocol above, but per-evaluation bandwidth is orders of magnitude above the elliptic-curve construction, and the paper benchmarks a single-server VOPRF rather than the threshold committee this pattern assumes. +- [Beasley (Li, Wang, Zhang, ePrint 2026/2010)](https://eprint.iacr.org/2026/2010): an implemented round-optimal, maliciously secure lattice VOPRF over MLWE/MSIS, and a candidate post-quantum replacement for the DDH construction here, benchmarked at 520 ms for the client request and proof, 15.3 ms verification, and 109 KB client communication on one AVX2 core. Bandwidth is orders of magnitude above the elliptic-curve version, and the paper covers a single server rather than the threshold committee this pattern assumes.