Efficient Designated-Verifier Non- Interactive Zero-Knowledge Proofs of Knowledge Pyrros Chaidos, Geoffroy Couteau 1 /11
Zero-Knowledge Proof prover verifier • Complete: if P knows a solution, V accepts • Sound: if there is no solution, P cannot convince V • Zero-Knowledge: V does not learn the solution 2 /11
Non-Interactive Zero- Knowledge Proof prover verifier • Complete: if P knows a solution, V accepts • Sound: if there is no solution, P cannot convince V • Zero-Knowledge: V does not learn the solution 3 /11
Non-Interactive Zero- Knowledge Proof of Knowledge prover verifier • Complete: if P knows a solution, V accepts • Sound: P must know a solution to convince V • Zero-Knowledge: V does not learn the solution 4 /11
Designated-Verifier NIZKPoK prover verifier • Complete: if P knows a solution, V accepts • Sound: P must know a solution to convince V • Zero-Knowledge: V does not learn the solution 4 /11
The NIZK Landscape Provably secure Hidden- bit model [BFM88] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11
The NIZK Landscape Provably secure Hidden- Groth- bit model Sahai [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11
The NIZK Landscape only from pairings Provably secure Hidden- Groth- bit model Sahai [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11
The NIZK Landscape From Σ -protocols + Provably secure homomorphic encryption Hidden- Groth- DVNIZK bit model Sahai [DFN06] [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11
Recommend
More recommend