About

Imported from mukul975/anthropic-cybersecurity-skills (skills/implementing-zero-knowledge-proof-for-authentication/SKILL.md). Install upstream with npx skills add mukul975/anthropic-cybersecurity-skills --skill implementing-zero-knowledge-proof-for-authentication. Copyright stays with the author (Apache-2.0).

Implementing Zero-Knowledge Proof for Authentication

Name: implementing-zero-knowledge-proof-for-authentication
Author: mukul975

Overview

Zero-Knowledge Proofs (ZKPs) allow a prover to demonstrate knowledge of a secret (such as a password or private key) without revealing the secret itself. This skill implements the Schnorr identification protocol and a simplified ZKPP (Zero-Knowledge Password Proof) using the discrete logarithm problem, enabling authentication where the server never learns the user's password.

When to Use

When deploying or configuring implementing zero knowledge proof for authentication capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Familiarity with cryptography concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Objectives

Implement Schnorr's identification protocol for ZKP authentication
Build a non-interactive ZKP using Fiat-Shamir heuristic
Implement zero-knowledge password proof (ZKPP)
Demonstrate completeness, soundness, and zero-knowledge properties
Compare ZKP authentication with traditional password verification

Key Concepts

ZKP Properties

Property	Description
Completeness	Honest prover always convinces honest verifier
Soundness	Dishonest prover cannot convince verifier (except negligible probability)
Zero-Knowledge	Verifier learns nothing beyond the statement's truth

Schnorr Protocol

Setup: Public generator g, prime p, q (order of g)
Registration: Prover computes y = g^x mod p (public key from secret x)
Commitment: Prover sends t = g^r mod p (random r)
Challenge: Verifier sends random c
Response: Prover sends s = r + c*x mod q
Verify: Check g^s == t * y^c mod p

Security Considerations

Use cryptographically secure random number generators
Challenge must be unpredictable (from verifier's perspective)
For non-interactive proofs, use Fiat-Shamir with collision-resistant hash
ZKP alone does not provide forward secrecy; combine with TLS

Validation Criteria

Honest prover always verifies successfully (completeness)
Random response without secret does not verify (soundness)
Server never receives the secret value
Non-interactive proof is verifiable offline
Multiple authentications produce different transcripts
Protocol resists replay attacks

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-zer-f7d28f/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

mukul975-anthropic-cybersecurity-skills-implementing-zer-f7d28f.ocm.jsonjson

{
  "ocm": "1",
  "id": "mukul975-anthropic-cybersecurity-skills-implementing-zer-f7d28f",
  "kind": "skill",
  "name": "implementing-zero-knowledge-proof-for-authentication",
  "description": "Implements the Schnorr identification protocol and a simplified Zero-Knowledge Password Proof (ZKPP) over the discrete logarithm problem, letting a prover authenticate by demonstrating knowledge of a secret without ever revealing it to the server. Use when designing or building password-less or password-secret-free authentication, or when a server must verify a user's credential without learning or storing the underlying secret.",
  "publisher": "mukul975",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "cryptography",
      "zero-knowledge-proof",
      "authentication",
      "privacy",
      "zkp",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Implements the Schnorr identification protocol and a simplified Zero-Knowledge Password Proof (ZKPP) over the discrete logarithm problem, letting a prover authenticate by demonstrating knowledge of a secret without ever revealing it to the server. Use when designing or building password-less or password-secret-free authentication, or when a server must verify a user's credential without learning or storing the underlying secret."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills",
      "path": "skills/implementing-zero-knowledge-proof-for-authentication/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/implementing-zero-knowledge-proof-for-authentication/SKILL.md",
      "key": "mukul975/anthropic-cybersecurity-skills/skills/implementing-zero-knowledge-proof-for-authentication/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Implementing Zero-Knowledge Proof for Authentication\n\n## Overview\n\nZero-Knowledge Proofs (ZKPs) allow a prover to demonstrate knowledge of a secret (such as a password or private key) without revealing the secret itself. This skill implements the Schnorr identification protocol and a simplified ZKPP (Zero-Knowledge Password Proof) using the discrete logarithm problem, enabling authentication where the server never learns the user's password.\n\n\n## When to Use\n\n- When deploying or configuring implementing zero knowledge proof for authentication capabilities in your environment\n- When establish",
  "cost": {
    "context_tokens": 665
  }
}

Fetch it by URL: GET /api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-zer-f7d28f/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.