Paper 2026/311

Security of the Fischlin Transform in Quantum Random Oracle Model

Christian Majenz, Technical University of Denmark
Jaya Sharma, Technical University of Denmark
Abstract

The Fischlin transform yields non-interactive zero-knowledge proofs with straight-line extractability in the classical random oracle model. This is done by forcing a prover to generate multiple accepting transcripts through a proof-of-work mechanism. Whether the Fischlin transform is straight-line extractable against quantum adversaries has remained open due to the difficulty of reasoning about the likelihood of query transcripts in the quantum-accessible random oracle model (QROM), even when using the compressed oracle methodology. In this work, we prove that the Fischlin transform remains straight-line extractable in the QROM, via an extractor based on the compressed oracle. This establishes the post-quantum security of the Fischlin transform, providing a post-quantum straight-line extractable NIZK alternative to Pass’ transform with smaller proof size. Our techniques include tail bounds for sums of independent random variables and for martingales as well as symmetrization, query amplitude and quantum union bound arguments.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
Keywords
Fischlin TransformQuantum Random Oracle Model(QROM)ExtractabilityNIZK
Contact author(s)
chmaj @ dtu dk
jaysh @ dtu dk
History
2026-02-21: approved
2026-02-18: received
See all versions
Short URL
https://ia.cr/2026/311
License
Creative Commons Attribution-NonCommercial
CC BY-NC

BibTeX

@misc{cryptoeprint:2026/311,
      author = {Christian Majenz and Jaya Sharma},
      title = {Security of the Fischlin Transform in Quantum Random Oracle Model},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/311},
      year = {2026},
      url = {https://eprint.iacr.org/2026/311}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.