Cited by 2,227Blockchain Technology Applications and SecurityCryptography and Data SecurityAdvanced Authentication Protocols Security

Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts

Kosba, Ahmed, Miller, Andrew, Shi, Elaine, Wen, Zikai, Papamanthou, Charalampos·2016·2016 IEEE Symposium on Security and Privacy (SP)

Abstract

Emerging smart contract systems over decentralized cryptocurrencies allow mutually distrustful parties to transact safely without trusted third parties. In the event of contractual breaches or aborts, the decentralized blockchain ensures that honest parties obtain commensurate compensation. Existing systems, however, lack transactional privacy. All transactions, including flow of money between pseudonyms and amount transacted, are exposed on the blockchain. We present Hawk, a decentralized smart contract system that does not store financial transactions in the clear on the blockchain, thus retaining transactional privacy from the public's view. A Hawk programmer can write a private smart contract in an intuitive manner without having to implement cryptography, and our compiler automatically generates an efficient cryptographic protocol where contractual parties interact with the blockchain, using cryptographic primitives such as zero-knowledge proofs. To formally define and reason about the security of our protocols, we are the first to formalize the blockchain model of cryptography. The formal modeling is of independent interest. We advocate the community to adopt such a formal model when designing applications atop decentralized blockchains.

Integrity signals

Registry

Crossref · 10.1109/sp.2016.55

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • The proposed solution uses smart contracts to handle data in the ledger.

    “In addition, the proposed solution makes use of smart contracts [24] (also known as chaincodes ) to handle data into the ledger.”
  • Smart contracts are decentralized, immutable, and transparent, making it possible to provide the architecture with fully auditable and secure processes.

    “Smart contracts are decentralized, immutable, and transparent, making it possible to provide the architecture with fully auditable and secure processes.”

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Kosba, A., Miller, A., Shi, E., Wen, Z., & Papamanthou, C.
Affiliations
  • University of Maryland, College Park (US)
  • Cornell University (US)
Venue
2016 IEEE Symposium on Security and Privacy (SP)
Publisher
IEEE
Published
2016-05
Pages
839-858
ISSN
1081-6011 (ISSN-L)
OpenAlex
W2517744317
Cited by
2,227
References
2
Citations by year
2026: 57 · 2025: 130 · 2024: 184 · 2023: 242 · 2022: 226 · 2021: 329 · 2020: 344 · 2019: 366 · 2018: 225 · 2017: 94 · 2016: 24 · 2015: 6
FWCI
201.04
Type
conference paper
Language
en
Open access
closed
Locations
IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
blockchain, smart contracts, zero-knowledge proofs, formal security model

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review