identity layer enabling automatic verification of end-to-end encrypted services, providing users with trust-minimized security and privacy through transparent key management.
Prism is a decentralized key transparency protocol, first inspired by the paper Tzialla et. al, leveraging zkSNARKs and DA solutions to enable trust-minimized verification of E2EE services via WASM/Native light clients. This eliminates the possibility for hidden backdoors in E2EE services through a user-verifiable key management system. It uses transparency dictionaries under the hood, offering a generalized solution for managing a label-value map in environments where the service maintaining the map is not completely trusted.
Prism provides the first key-transparency solution to enable automatic verification of the service provider. This is achieved by providing constant size succinct proofs to WASM/Native light clients over a data availability layer. Alternative DA solutions are in planning, allowing for a less trust-minimized client where a p2p node cannot be embedded.
The system is designed to be efficient, scalable and secure, making it suitable for a wide range of applications.
You can view further information about the project in our documentation. The project is undergoing rapid development. You can view the current development status here.
The project is still in the early development phase, is pending an audit, and is not yet suitable for use in production environments.
Due to this ongoing development work, changes are still being made that will affect existing functionality and the API.
Initially, Prism was implemented with handwritten circuits. These legacy circuits for both groth16 and supernova are available in the zk crate, but are no longer maintained and will not compile with the latest version of the imported crates.
We have found, against intuition, that the SP1 zkVM provides much better performance than the legacy circuits. It also offers a more secure, auditable implementation that is maintainable by any rust developer. For our explanation as to why a zkVM ends up being more efficient, refer to our documentation.
We use just as a task runner. Once installed, you can install the rest of the dependencies with:
just install-depsTo build the project, run:
just buildThis will compile the prism-cli binary and sp1 ELF that are used to run the prover, light-client, and full-node.
To run a local Celestia network for testing, use:
just celestia-upIf the dependencies are installed and the local devnet is running, a prism node can be started.
Prism can be started in three different ways:
- as a prover (service provider and proof generator)
- as a light-client (to verify the proofs posted on Celestia using the cryptographic commitments)
- as a full-node (acts as a service provider, processing all transactions and making the state available to the light-clients)
To start the prover, run:
prism-cli proverThis will output the prover's verifying key in the logs, which you can use along with the light-client and full-node to verify the proofs.
to start the light-client, run the following command:
prism-cli light-client|full-node --verifying-key <verifying-key>You can then interact with Prism via the interfaces defined in webserver.rs.
Contributions are welcome! Please refer to our contributing guidelines for information on how to submit pull requests, report issues, and contribute to the codebase.
See SECURITY.md.
This project is dual-licensed:
- AGPL-3.0 for non-commercial use (see LICENSE)
- Commercial license available for commercial