# (Migrated to Notion) [zkRSA Primitive](https://hackmd.io/@Lbt60bghQ4CTs8dkUj5_4w/r1mUReTJo) ## Vision zkRSA primitive will be part of the tool set to enable make claims with your credentials without disclosing your own identity leveraging RSA signatures. E.g. I belong to organization X and I say Y. ## Strategy The goal is to prove that, as a user, I can take a credential (such as email, goverment id, etc.) that has an RSA signature of some recognised authority and generate a zk proof for it in the browser. Further end-user applications can be built on top of it. ## Roadmap - PSE zkRSA - [General Grant Proposal v2] (https://hackmd.io/DoZPolTRRN-WNYheT7MauA) - Evaluate next steps after **Feb 2023**. - Areas worth to explore in the future (after this grant) - Using Halo2 RSA verifications circuits instead of Circom to improve proving time. - Exploring rapid-snark instead of snark.js. ## Backlog - Smaller grained tasks, check lists or GitHub issues. https://github.com/dmpierre/zkrsa ## Related Projects - Personae Labs - [zk email](https://www.youtube.com/watch?v=w7UAcsptyeo&t=22335s) - Projects using ZKPs for sensitive data: - [DoubleBlind](https://github.com/doubleblind-xyz/double-blind): prove ownership of an RSA key, for group signatures. - HeyAnon, for anonymous messages broadcasting, conditional on a user beloging to a specific group with programmatic verifiability (e.g. using on-chain information). - Circuits of interest for this project: - [RSA Halo2 verification circuits](https://github.com/SoraSuegami/halo2_rsa) - [RSA Signature Circom verification circuits](https://github.com/zkp-application/circom-rsa-verify) ## Possible Ecosystem Usecases - RSA Sources - Email - Government / Company Credentials - Digital Certificates - Selective revelation of - Personal Information (as attested by Government) - Age - Residence - Sex - Email - DSNs Server - Company - Institution - Email Body - Oracle Information - Digital Certificate - Proof of ownership of asset X - Proof of health - Possible Verticals - Whistle Blowing (government and corporate) - Proof of personhood - Proof of company - Proof of residence - Proof of information ## Possible Negative Usecases - Leaking national security secrets - Leaking corporate secrets - [Tragedy of the commons](https://en.wikipedia.org/wiki/Tragedy_of_the_commons) - Note: need to explore these topics further in a controled environment. ## Assumptions - Pending to do exercise in [Assumption / Validation Flowchart](https://medium.com/product-ponderings/assumption-validation-flowchart-9dc42293b612) ## Challenges - Impersonation (stealing of RSA source) - "Tragedy of the commons" ## Meetings & Links: - [zkRSA - 28th October 2022](https://hackmd.io/dCCDpZfFRwq-B_VlrjjiQw) - [zkRSA - 11th November 2022](https://hackmd.io/eYRM7wmpSHKWexgpAix3gA?view) - [zkRSA - 28th November 2022](https://hackmd.io/VaRvgh0cTbicsfTHbULdiQ?edit) ## Relevant Links: - Depplyed Application https://zkrsa.vercel.app/ - Repository https://github.com/dmpierre/zkrsa ###### tags: `zkrsa`