zkDaily - 2026-05-29

零知识证明 zkDaily

ZKP Frontier Tracker 🎯

Fri

05.29

2026

Doubly Aggregatable Signatures

Paper

https://eprint.iacr.org/2026/1042

Georg Fuchsbauer Multi-signatures

Fuchsbauer et al. proposed doubly aggregatable signatures in their paper, enabling efficient two-layer aggregation with SNARKs for bitmap predicates, applied to incentivizing vote dissemination in consensus.

Notes

Introduced doubly aggregatable signatures: layer-0 signatures aggregated into layer-1 attestations, then aggregated into a succinct certificate.
Security model covers unforgeability and equivocation resistance.
Two constructions: one with linear-size public keys & efficient verification (2 pairings), another with constant-size keys but linear pairings.
Based on RMSS, enabling algebraic verification and SNARK-friendly predicates on bitmaps.
Key application: incentivizing timely all-to-all vote dissemination in consensus protocols.
Prototype implementation demonstrates concrete efficiency.

Collected by @icerdesign

零知识证明 zkDaily

Q&A Deep Dive 💬

Fri

05.29

2026

What are Doubly Aggregatable Signatures?

Doubly Aggregatable Signatures are a two-layer signature aggregation scheme. Layer-0 signers sign a message, while layer-1 signers attest to the signatures they observed, producing a compact aggregated certificate.

What is the “who observed whom” bitmap in the paper?

The bitmap records which layer-1 signers observed which layer-0 signatures. Verifiers can use it to check vote dissemination and prevent fake observation claims.

How does the scheme prevent equivocation attacks?

The security model ensures that a layer-1 signer can only attest to layer-0 signatures it actually observed. Otherwise, the attestation is treated as a forgery. Cryptographic binding and aggregation checks enforce this property.

Prompted by @icerdesign