IPTF

Institutional Privacy Task Force

[IPTF @iptf_updates]

The map is open source and open to contributions.

If your privacy work belongs in this knowledge base, open a PR.

Links in the reply below.

[IPTF @iptf_updates]

iptf [dot] ethereum [dot] org is live with a major update!

A comprehensive, navigable guide to privacy on Ethereum: for institutions deploying private infrastructure, and for the end users protected by it.

[IPTF @iptf_updates]

Every approach is evaluated under CROPS: Censorship Resistance, Openness, Privacy, and Security.

Institution-to-institution and institution-to-user power dynamics are each modeled, with per-persona summaries for business, technical, and legal functions.

[IPTF @iptf_updates]

A two-week dispute window lets anyone challenge invalid records via KZG openings.

What lands on-chain: petition outcome and vote tally per eligibility group. No signer identity. No queryable roster. Eligibility uses anonymous group membership proofs, matching the same interface of our resilient identity proof of concept.

Writeup: https://t.co/0HxVCRPIHI

[IPTF @iptf_updates]

Public petition signer lists expose signers to retaliation. In high-stakes contexts, knowing who signed can be dangerous.

New IPTF writeup: Resilient Civic Participation. Prove a petition reached quorum without ever publishing who signed.

Third and final post in our resilience series.

[IPTF @iptf_updates]

Two mechanisms carry the design.

Forward-secure ratchet: each signer advances a local key state that cannot regress. Seed material is overwritten after each slot. A compromised device cannot produce prior signatures.

Proofs are batched and published as EIP-4844 blobs.

[IPTF @iptf_updates]

Stack: @NoirLang circuits, Solidity/Foundry contracts, smartcards (@Keycard_).

Transport: Briar (BLE) / Meshtastic (LoRa) / Reticulum. On-chain: aggregates and nullifiers only.

Writeup: https://t.co/JTp87G8R4t

Code: https://t.co/Bb9puAHBKL

[IPTF @iptf_updates]

New writeup: Resilient Disbursement Rails.

Aid organizations' beneficiary databases are an operational security risk. IPTF's PoC shows how to run a disbursement program where no participant, at any step, holds a complete list of recipients.

[IPTF @iptf_updates]

Each recipient's smartcard holds a private key that never leaves the device. To claim, the card signs a one-time voucher offline. A relay takes the signed voucher, generates a ZK proof, and submits it through a mesh network. The contract pays to a new address per claim.

Result: enrollment, claim, and cash-out are unlinkable by design.

[IPTF @iptf_updates]

This kind of thing helps a lot with legibility of privacy on chain for enterprises

Kudos to @EntEthAlliance for making it happen!

Happy for IPTF to have played a small part in making this happen

[Enterprise Ethereum Alliance | eea.eth @EntEthAlliance]

📣 The EEA Privacy Working Group is releasing its first report: "State of Privacy on Ethereum for Enterprise".

7 EEA member organizations and 1 comprehensive map of enterprise privacy on Ethereum.

More on what this means 🧵⬇️

[IPTF @iptf_updates]

Circuits in Noir/UltraHonk, contracts in Solidity, client in Rust. Selective disclosure supports GDPR data minimization. Onchain events satisfy audit requirements without revealing holder identity.

Full writeup: https://t.co/SwkHOClt2s

[IPTF @iptf_updates]

Current on-chain identity breaks when the issuer does. Sanctioned, shut down, or turned adversarial; already-verified users lose the ability to prove their credentials.

This is the first post in our three-part resilience series on identity, payments, and coordination. We published a PoC that removes the issuer from the verification path entirely.

[IPTF @iptf_updates]

Enrollment is one-time.

A threshold MPC network issues a vOPRF tag; an on-chain Merkle root is the trust anchor. The issuer then exits the path entirely.

Three sybil resistance layers:
- vOPRF: one leaf per credential
- 0.1 ETH refundable stake
- Web-of-trust vouching

[IPTF @iptf_updates]

Also in v0.3.0: 15 new use cases across supply chain, bonds, FX, stocks, and payment corridors. Every pattern carries a CROPS evaluation (Censorship Resistance, Open source, Privacy and Security).

Full release: https://t.co/t7eev92PRn

Browse all patterns: https://t.co/UAdAZep2UJ

[IPTF @iptf_updates]

IPTF map v0.3.0 shipped.

71 commits. 162 files changed.

New PSI patterns, composable spend and delegation primitives from EIP-8182, a post-quantum threat domain, 15 new institutional use cases, and the CROPS framework across all patterns.

Here's what landed.

[IPTF @iptf_updates]

v0.3.0 introduces a post-quantum threat domain mapping which Ethereum primitives break under Shor's algorithm (ECDSA, BLS, ECDH, Groth16, PLONK/KZG) and what Grover's weakens. Quantum exposure notes added to 16 affected patterns.

Includes: ZK Proof Systems comparison (pairing-based SNARKs vs hash-based STARKs, quantum safety) and Native Account Abstraction from EIP-8141, protocol-level, replacing hardcoded ECDSA with user-defined validation.

https://t.co/OCiPxM3x7V

[IPTF @iptf_updates]

IPTF is at ETHCC in Cannes:

@oskarth at main event (Kelly stage) 1315 Wed 1st

@yanis_mezn at main event (Taylor Stage) 1515 Wed 1st and Secret Agents (Bermuda) Wed 1st

@motypes will be presenting at Blockspace Forum Cannes tomorrow Tue 31th

...and a few more event :)