[Resource Topic] 2025/1064: From Signature-Based Witness Encryption to RAM Obfuscation: Achieving Blockchain-Secured Cryptographic Primitives

Welcome to the resource topic for 2025/1064

Title:
From Signature-Based Witness Encryption to RAM Obfuscation: Achieving Blockchain-Secured Cryptographic Primitives

Authors: Lev Stambler

Abstract:

Goyal and Goyal demonstrated that extractable witness encryption, when combined with smart-contract equipped proof-of-stake blockchains, can yield powerful cryptographic primitives such as one-time programs and pay-to-use programs. However, no standard model construction for extractable witness encryption is known, and instantiations from alternatives like indistinguishability obfuscation are highly inefficient.

This paper circumvents the need for extractable witness encryption by combining signature-based witness encryption (Döttling et al.) with witness encryption for KZG commitments (Fleischhacker et al.). Inspired by Goyal et al., we introduce T+1-Extractable Witness Encryption for Blockchains (T+1-eWEB), a novel primitive that encrypts a secret, making its decryption contingent upon the subsequent block’s state. Leveraging T+1-eWEBs, we then build a conditional one-time memory, leading to a T+1 one-time program (T+1-OTP) also conditional on the next block state. Finally, using our T+1-OTP, we develop a conditional RAM obfuscation scheme where program execution can be contingent on the blockchain state, thereby enabling applications like pay-to-use programs.

Despite its theoretical value, our construction is impractical due to a “bit-by-bit” signing requirement for the state root and an inefficient method for storing validator keys. We thus posit the construction of a practical T+1-OTP as a significant open problem. This work provides the first theoretical pathway for building such primitives without extractable witness encryption, representing a novel step for blockchain-secured cryptography

ePrint: https://eprint.iacr.org/2025/1064

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .