Key Takeaways
- NIST guidance urges early adoption to prevent quantum computers from breaking current identity proofs.
- Hash-based post-quantum models mitigate forgery risks instead of “Harvest Now, Decrypt Later” threat vectors.
- World ID and Ethereum aim to fully transition to post-quantum standards prior to expected 2030s timelines.
Proactive Post-Quantum Adoption
World recently unveiled an open-source and production-ready zero-knowledge (ZK) proving toolkit designed to enable individuals to generate cryptographic proofs directly on smartphones and web browsers. Already integrated into World ID, the toolkit known as Provekit v1 allows users to verify personal information without revealing underlying sensitive data to third parties.
The launch comes a few months after the Sam Altman-founded entity unveiled a developer toolkit designed to bring cryptographic proof of human identity to the growing field of artificial intelligence (AI) agents. At the time, World said the toolkit would allow AI agents to prove they are backed by a unique and verified person through World ID.
Addressing the rationale behind integrating 128-bit post-quantum security into the toolkit, a World Foundation spokesperson stated that migrating to quantum-resistant standards now aligns with recommendations from setting bodies like the National Institute of Standards and Technology (NIST).
“Security requires taking a real-but-low-probability risk seriously,” the spokesperson said, noting that while practical quantum attacks may remain five to 15 years away, replacing embedded cryptographic infrastructure across hardware and software systems takes years to execute. The representative added that post-quantum security and low-latency performance are synergistic rather than conflicting goals.
According to a media statement, the toolkit relies on a hash-based commitment scheme known as WHIR instead of traditional elliptic-curve math, eliminating the need for a trusted setup. Without a trusted setup, smartphones running the World App are freed from holding large proving keys in memory, directly enabling low-end devices to handle computations.
Benchmark tests show Provekit generates proofs in just a few seconds on standard smartphones and under 30 seconds on low-end hardware, with proof sizes averaging roughly 1 MB. For environments like Ethereum on-chain verification where smaller footprints are required, World recommends recursive verification using a compact proof system such as Groth16.
Addressing questions regarding potential “Harvest Now, Decrypt Later” (HNDL) attacks, the spokesperson clarified to Bitcoin.com News that this was not the main driver for Provekit’s design. Since the toolkit processes zero-knowledge proofs locally rather than transmitting raw biometrics or credentials over the web, personal privacy remains information-theoretically secure regardless of quantum advances.
Instead, the primary post-quantum risk for zero-knowledge systems involves proof soundness and forgery. Without post-quantum protections, a quantum computer could allow an attacker to forge proofs of personhood or authenticate as another individual.
“A zero-knowledge proof isn’t a secret waiting to be unlocked or decrypted; it’s a claim that something is true, so the concern is forgery, not confidentiality,” the spokesperson explained, adding that World ID and Ethereum are moving toward full post-quantum protection to preserve long-term forward security.
Developers building on Provekit can create custom claims using Noir, an open-source, Rust-inspired domain-specific language developed by Aztec. Custom claims can be distributed dynamically without bundling them directly into primary applications. The software also supports World ID Credentials, reading and storing encrypted data locally from NFC-enabled identity documents.
Stored information remains inaccessible to external parties, including the World Foundation and Tools for Humanity. World, meanwhile, said it is currently developing Provekit v2, which aims to further reduce proof sizes and memory consumption while improving on-chain verification efficiency.
