Kuantum sonrası kimlik doğrulama ile sıfır bilgi ispatları: zk-snark'lar ve zk-stark'ların karşılaştırmalı güvenlik ve performans analizi

Password-based authentication methods are among the most widely used security mechanisms, yet they contain significant vulnerabilities. Additionally, building, managing, and securely storing password infrastructure incurs high computational and operational costs. According to Forrester Research, annual password reset costs in an organization of 1,000 employees range from approximately $420,000 to $490,000. In contrast, Zero-Knowledge Proofs (ZKPs) are robust cryptographic methods that enable authentication without revealing sensitive identity data. Developed in the mid-1980s, ZKP protocols are critically important in areas such as blockchain technology, the Internet of Things (IoT), the financial sector, and identity management. These protocols are divided into Interactive Zero-Knowledge Proofs (IZKP) and Non-Interactive Zero-Knowledge Proofs (NIZKP). Among them, NIZKP solutions such as zk-SNARKs and zk-STARKs enable one-way communication for verification, offering greater resilience against Man-in-the-Middle (MitM) attacks. zk-SNARKs are widely adopted thanks to their small proof sizes and fast verification times. zk-STARKs, on the other hand, eliminate the need for a trusted setup, providing a more transparent design and improved resistance to post-quantum attacks. ZKPs reduce operational costs, eliminate the burden of password resets, and significantly lower the risk of data breaches. They also facilitate compliance with regulatory frameworks such as GDPR, PCI-DSS, and ISO, offering organizations a more sustainable solution. In conclusion, this study aims to provide a perspective on adopting more secure, privacy-preserving, and scalable ZKP-based authentication techniques as replacements for traditional password-based systems.