efficient designated verifier non interactive zero
play

Efficient Designated-Verifier Non- Interactive Zero-Knowledge Proofs - PowerPoint PPT Presentation

Efficient Designated-Verifier Non- Interactive Zero-Knowledge Proofs of Knowledge Pyrros Chaidos, Geoffroy Couteau 1 /11 Zero-Knowledge Proof prover verifier Complete: if P knows a solution, V accepts Sound: if there is no solution, P


  1. Efficient Designated-Verifier Non- Interactive Zero-Knowledge Proofs of Knowledge Pyrros Chaidos, Geoffroy Couteau 1 /11

  2. Zero-Knowledge Proof prover verifier • Complete: if P knows a solution, V accepts • Sound: if there is no solution, P cannot convince V • Zero-Knowledge: V does not learn the solution 2 /11

  3. Non-Interactive Zero- Knowledge Proof prover verifier • Complete: if P knows a solution, V accepts • Sound: if there is no solution, P cannot convince V • Zero-Knowledge: V does not learn the solution 3 /11

  4. Non-Interactive Zero- Knowledge Proof of Knowledge prover verifier • Complete: if P knows a solution, V accepts • Sound: P must know a solution to convince V • Zero-Knowledge: V does not learn the solution 4 /11

  5. Designated-Verifier NIZKPoK prover verifier • Complete: if P knows a solution, V accepts • Sound: P must know a solution to convince V • Zero-Knowledge: V does not learn the solution 4 /11

  6. The NIZK Landscape Provably secure Hidden- bit model [BFM88] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11

  7. The NIZK Landscape Provably secure Hidden- Groth- bit model Sahai [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11

  8. The NIZK Landscape only from pairings Provably secure Hidden- Groth- bit model Sahai [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11

  9. The NIZK Landscape From Σ -protocols + Provably secure homomorphic encryption Hidden- Groth- DVNIZK bit model Sahai [DFN06] [BFM88] [GS07] Practical Inefficient NIZKs Fiat- Shamir [FS86] Heuristic 5 /11

Recommend


More recommend