World Makes ProveKit Open Source to Advance Privacy-Centric Identity Verification
World, formerly known as Worldcoin and co-founded by OpenAI's Sam Altman, has announced the full open sourcing of its zero-knowledge identity verification toolkit, ProveKit. After a limited test through the World ID project in April, World now offers developers access to the source code aiming to promote broader adoption of privacy-preserving authentication solutions.
According to a spokesperson from the World Foundation, ProveKit enables users to generate cryptographic proofs directly on their mobile devices or browsers. This proves claims such as age, nationality, or possession of valid identity documents without revealing underlying personal information. Verifiers can confirm the authenticity of the claim but receive no additional sensitive data, reinforcing the system's privacy safeguards and eliminating the need for centralized access.
Local Proof Generation Minimizes Data Exposure Risks
Diverging from approaches that transmit data to external servers for processing, ProveKit relies on proofs generated locally on user devices, keeping sensitive information stored exclusively on personal phones or computers. The toolkit supports Aztec's Rust-based zero-knowledge language, Noir, allowing flexible creation of various verifiable claims without embedding personal data within applications.
Practical use cases include proof generation on smartphones and common web browsers, with performance benchmarks indicating most modern devices complete verifications in seconds, and even lower-tier hardware processing proofs within 30 seconds.
Integration with NFC-Enabled Identity Documents
World highlights that identity credentials embedded with NFC chips, such as passports and national IDs, can have their information locally stored within World ID. The relevant data undergoes cryptographic signatures from issuing authorities and is verified through zero-knowledge circuits, ensuring that neither World Foundation, Tools for Humanity, nor other entities access the raw personal details.
Emphasizing Post-Quantum Security and Efficient Offline Verification
ProveKit is designed to meet 128-bit post-quantum security standards without relying on trusted setups, balancing resilience against both classical and quantum attacks. The current version 1.0 is in production and optimized for server and mobile offline verification. Development of version 2.0 aims to reduce proof sizes, computational demands, and enhance on-chain verification efficiency.
The upcoming release plans to incorporate the Groth16 proving system, targeting efficient validation on prominent blockchains such as World Chain, Ethereum, Base, and Solana. Previously, World ID utilized the Ethereum Foundation's Semaphore protocol, which employs a similar approach.
Navigating Regulatory Challenges Across Multiple Jurisdictions
As World progresses with biometric-based identity initiatives, it faces regulatory scrutiny in regions including Spain, Kenya, Brazil, Indonesia, South Korea, Hong Kong, and the Philippines. The company actively engages with regulators worldwide to ensure compliance and facilitate responsible expansion.
Industry Context on Identity Document Security
Recently, reports emerged of the FBI's New Orleans office investigating the dark web marketplace Nexus for selling over 153 million scanned U.S. and Canadian driver's licenses, allegedly linked to the identity firm IDScan.net. In this context, Remco Bloemen, World’s blockchain lead, emphasized that identity documents should be verified exclusively through zero-knowledge proofs, eliminating the need to disclose full personal information to authenticate license validity.
By open-sourcing ProveKit, World proposes a more secure, decentralized approach to identity verification technology, warranting close observation of subsequent regulatory developments and market adoption trends.