Linear-time zero-knowledge proofs for arithmetic circuit satisfiability

Bootle, Jonathan; Cerulli, Andrea; Ghadafi, Essam; Groth, Jens; Hajiabadi, Mohammad; Jakobsen, Sune K.

Abstract

We give computationally efficient zero-knowledge proofs of knowledge for arithmetic circuit satisfiability over a large field. For a circuit with N addition and multiplication gates, the prover only uses O(N) multiplications and the verifier only uses O(N) additions in the field. If the commitments we use are statistically binding, our zero-knowledge proofs have unconditional soundness, while if the commitments are statistically hiding we get computational soundness. Our zero-knowledge proofs also have sub-linear communication if the commitment scheme is compact. Our construction proceeds in three steps. First, we give a zero-knowledge proof for arithmetic circuit satisfiability in an ideal linear commitment model where the prover may commit to secret vectors of field elements, and the verifier can receive certified linear combinations of those vectors. Second, we show that the ideal linear commitment proof can be instantiated using error-correcting codes and non-interactive commitments. Finally, by choosing efficient instantiations of the primitives we obtain linear-time zero-knowledge proofs.

• Presentation Conference Type: Conference Paper (published)
• Conference Name: ASIACRYPT 2017
• Start Date: Dec 3, 2017
• End Date: Dec 7, 2017
• Acceptance Date: Aug 13, 2017
• Online Publication Date: Nov 17, 2017
• Publication Date: Dec 31, 2017
• Deposit Date: Sep 14, 2017
• Publicly Available Date: Dec 18, 2017
• Publisher: Springer Verlag
• Peer Reviewed: Peer Reviewed
• Volume: 10626
• Pages: 336-365
• Series Title: Advances in Cryptology – ASIACRYPT 2017
• Series ISSN: 0302-9743
• Book Title: Lecture Notes in Computer Science
• ISBN: 9783319706993
• DOI: https://doi.org/10.1007/978-3-319-70700-6_12
• Keywords: zero-knowledge, arithmetic circuit
• Public URL: https://uwe-repository.worktribe.com/output/876742
• Publisher URL: https://link.springer.com/bookseries/558
• Additional Information: Title of Conference or Conference Proceedings : International Conference on the Theory and Applications of Cryptology and Information Security (Asiacrypt 2017)
• Contract Date: Sep 14, 2017