can secrets be deciphered from the proofs generated with ZK-Snarks if a quantum attack were plausible?

I understand the concern that ZK-snarks and some of their cryptography may be broken by quantum computing in the future.

My question is whether with the proofs generated an attacker could reveal variables of the equations made in the calculations.

some articles mention that if an attacker could break the cryptography of the zk-snarks he could forge proofs and send it to the verifier as valid proof, but could he recover secrets from the proofs?

a related question.


circom circuit as an example:

pragma circom 2.1.6;

include "circomlib/poseidon.circom";

template Function() {
    signal input secret;//can the quantum attacker get to secret from the evidence generated in this circuit?
    signal output preimage;

    component hash = Poseidon(1);
    hash.inputs[0] <== secret;

    preimage <== hash.out;


component main = Function();

1 Answer 1


Generally, no. Basically all SNARK schemes have "perfect zero-knowledge" or "statistical zero-knowledge", meaning they do not rely on any computational assumptions in order to hide the witness. This is true for Groth16, Plonk, Halo, ZK-STARK, and Nova


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.