A small zero-knowledge virtual machine built only from hash functions.
Why it matters: Will merge thousands of quantum-safe validator signatures into one proof.
On the map: hash-based zkVM: 128-bit ROM (64-bit QROM) soundness, no proximity-gap conjecture
Map note, rests on: Fiat-Shamir with a real hash + sound implementation
A minimal zero-knowledge virtual machine built only from hash functions, designed for post-quantum Ethereum[1, 2]. Its first job is aggregating thousands of hash-based validator signatures into one proof, replacing BLS aggregation.
Its design targets 128-bit soundness in the random oracle model (64-bit against quantum attackers) without relying on proximity-gap conjectures, and it is being formally verified[3]. It is targeted at strawmap fork I*[4].
If any of these breaks, this breaks too.
If this breaks, these break with it.