MOLE Post-Quantum Privacy Framework Uses UOV and VOLEitH for Anonymous Credentials

Details

MOLE endorsements and credentials are constructed using UOV (uov-Ip) signatures with a 46.6KB public key size, leveraging VOLEitH for zero-knowledge proof generation.
Two specific schemes are under development: VOLE-IHAT for endorsements (5.6KB issuance, 6.5KB presentation) and VOLE-ACT for credentials (5.4KB issuance, 12.0KB presentation).
PoMFRIT optimization reduces proof size by splitting proof generation into two stages, allowing the issuer to compute hashes directly and avoiding redundant hash evaluations in the ZK circuit.
Performance improvements are achieved by replacing standard SHAKE with TurboSHAKE (12 rounds vs 24) and reducing Keccak state size from 1600-bit to 800-bit, which halves multiplication operations in the circuit.
Multivariate-native primitives, such as Pedersen commitments adapted for MQ maps, are explored to further simplify proofs, though security in this parameter region remains uncertain.
Remaining challenges include formal security proofs based on UOV, waiting for cryptanalysis maturity, and protocol engineering adjustments like amortizing redemptions across multiple requests due to larger message sizes.

Key point