I have some sensitive data I'd like to keep in my contract in privacy. I'd like to make a simple version of Zero-Knowledge Proofs and have an idea in mind. Let's say I have a customer who filled out 6 fields in my dapp:
- First Name as attr1
- Last Name as attr2
- Birthdate as attr3
- Phone number as attr4
- Passport number as attr5
I am making
and store it in a map where
A third party could hash its dapp input using my scheme,query my contract and check if my dapp had this client. If true it can get metadata about found client, e.g. a credit score.
My questions are:
- what do you think about this simple ZKP scheme? do you have any other ideas how to realize it?
- how easy will it be for an attacker to make a lookup table with all hash1 or hash2 variants (most important question)
- should I keep hash1/hash2 scheme in secret?