World launched Provekit v1, an open-source zero-knowledge proving toolkit with 128-bit post-quantum security, already integrated into World ID to enable cryptographic proof generation on smartphones and browsers. A World Foundation spokesperson stated the integration aligns with National Institute of Standards and Technology (NIST) recommendations for early adoption of quantum-resistant standards, noting that while practical quantum attacks may remain five to 15 years away, replacing cryptographic infrastructure across systems requires years of preparation. The toolkit addresses the risk that future quantum computers could forge zero-knowledge proofs of personhood, enabling attackers to authenticate as other individuals, rather than the "Harvest Now, Decrypt Later" threat vector that affects encrypted data confidentiality.
The launch comes a few months after the Sam Altman-founded entity unveiled a developer toolkit designed to bring cryptographic proof of human identity to the growing field of artificial intelligence (AI) agents. At the time, World said the toolkit would allow AI agents to prove they are backed by a unique and verified person through World ID. Provekit v1 allows users to verify personal information without revealing underlying sensitive data to third parties.
World Integrates Hash-Based WHIR Commitment Scheme
According to a media statement, the toolkit relies on a hash-based commitment scheme known as WHIR instead of traditional elliptic-curve math, eliminating the need for a trusted setup. Without a trusted setup, smartphones running the World App are freed from holding large proving keys in memory, directly enabling low-end devices to handle computations. For environments like Ethereum on-chain verification where smaller footprints are required, World recommends recursive verification using a compact proof system such as Groth16.
Provekit Generates Proofs in Seconds on Standard Smartphones
Benchmark tests show Provekit generates proofs in just a few seconds on standard smartphones and under 30 seconds on low-end hardware, with proof sizes averaging roughly 1 MB. The World Foundation spokesperson stated that post-quantum security and low-latency performance are synergistic rather than conflicting goals.
Post-Quantum Security Targets Proof Forgery Risk
Addressing questions regarding potential "Harvest Now, Decrypt Later" (HNDL) attacks, the spokesperson clarified that this was not the main driver for Provekit's design. Since the toolkit processes zero-knowledge proofs locally rather than transmitting raw biometrics or credentials over the web, personal privacy remains information-theoretically secure regardless of quantum advances. Instead, the primary post-quantum risk for zero-knowledge systems involves proof soundness and forgery. Without post-quantum protections, a quantum computer could allow an attacker to forge proofs of personhood or authenticate as another individual.
"A zero-knowledge proof isn't a secret waiting to be unlocked or decrypted; it's a claim that something is true, so the concern is forgery, not confidentiality," the spokesperson explained, adding that World ID and Ethereum are moving toward full post-quantum protection to preserve long-term forward security.
Developers Access Custom Claims via Noir Language
Developers building on Provekit can create custom claims using Noir, an open-source, Rust-inspired domain-specific language developed by Aztec. Custom claims can be distributed dynamically without bundling them directly into primary applications. The software also supports World ID Credentials, reading and storing encrypted data locally from NFC-enabled identity documents. Stored information remains inaccessible to external parties, including the World Foundation and Tools for Humanity.
World Develops Provekit v2 for Reduced Proof Sizes
World said it is currently developing Provekit v2, which aims to further reduce proof sizes and memory consumption while improving on-chain verification efficiency.
FAQ
What did World launch recently?
World launched Provekit v1, an open-source zero-knowledge proving toolkit with 128-bit post-quantum security, already integrated into World ID. The toolkit enables users to generate cryptographic proofs on smartphones and browsers without revealing sensitive data to third parties.
Why did World integrate post-quantum security into Provekit?
A World Foundation spokesperson stated the integration aligns with NIST recommendations for early adoption of quantum-resistant standards. While practical quantum attacks may remain five to 15 years away, replacing cryptographic infrastructure takes years, and post-quantum security prevents future quantum computers from forging zero-knowledge proofs of personhood.
How does Provekit perform on smartphones?
Benchmark tests show Provekit generates proofs in just a few seconds on standard smartphones and under 30 seconds on low-end hardware, with proof sizes averaging roughly 1 MB.
