latticejolt

a16z crypto announces the launch of Lattice Jolt

#a16zcrypto has introduced #LatticeJolt , a lattice-based zero-knowledge virtual machine that replaces elliptic-curve cryptography with quantum-resistant alternatives. The #zkVM is designed to protect blockchain systems against future quantum computers capable of breaking today’s cryptographic foundations.

Lattice Jolt is positioned as an alternative within a16z’s existing Jolt zkVM framework. While lattice-based cryptography offers quantum resistance, it has traditionally required larger proofs and greater computational resources than elliptic-curve systems. Lattice Jolt makes proving and verification 2-3x faster while delivering sub-100 KB proofs, the smallest among post-quantum zkVMs.

👉 a16zcrypto.com/posts/article/lattice-snarks-jolt-post-quantum-faster/

📰 a16z crypto releases an open-source new version of its zkVM, Lattice Jolt, replacing the earlier elliptic-curve-based Dory with a lattice-cryptography-based Akita. The result is very straightforward: the prover and verifier are sped up by 2–3x, the proof size is compressed to below 100KB, and it also comes with post-quantum security capabilities.
🔥 On the same machine, using pure CPU it can prove more than 2 million RISC-V cycles per second; with Apple Metal, the MacBook exceeds 10 million cycles per second. Compared to the previous curve-based pure CPU at about 1 million cycles, this improvement is indeed pretty wild.
💡 Proof size being smaller also matters. Proofs from other post-quantum zkVMs are usually above 200KB, and some reach around 600KB; Lattice Jolt is already below 100KB. Prover memory usage also drops from about 300 bytes per cycle to 200 bytes, allowing mobile devices to handle millions of cycles.

To be honest, in the past, post-quantum schemes often gave people the impression of “safer, but also slower and heavier.” Lattice Jolt flips that: lattice cryptography can reach the corresponding security level already in a 128-bit field, with less computation than the original 256-bit field. However, for the zero-knowledge properties needed for privacy applications, we’ll have to wait for subsequent supporting papers to be added.
🤔 If the lattice approach can hold the line on speed, proof size, and post-quantum security at the same time, do you think the next batch of zkVMs will switch directions as well?
#LatticeJolt #zkVM #零知识证明 #post-quantum cryptography