<p>We present techniques for constructing zero-knowledge argument systems from garbled circuits, extending the GC-to-ZK compiler by Jawurek Et al. (<CitationRef CitationID="CR40">2013</CitationRef>) and the GC-to-<InlineEquation ID="IEq1"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="18" /> </InlineMediaObject> <EquationSource Format="TEX">\(\varSigma \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>Σ</mi> </math></EquationSource> </InlineEquation> compiler by Hazay and Venkitasubramaniam (<CitationRef CitationID="CR37">2020</CitationRef>) to the following directions: − Our schemes are <i>hybrid, commit-and-prove</i> zero-knowledge argument systems that establish a connection between secrets embedded in <i>algebraic</i> commitments and a relation represented by a <i>Boolean</i> circuit. − Our schemes incorporate diverse <i>cross-domain</i> secrets embedded within distinct algebraic commitments, simultaneously supporting Pedersen-like commitments and lattice-based commitments. As an application, we develop circuit-represented compositions of <InlineEquation ID="IEq2"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="18" /> </InlineMediaObject> <EquationSource Format="TEX">\(\varSigma \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>Σ</mi> </math></EquationSource> </InlineEquation>-protocols that support attractive access structures, such as weighted thresholds, that can be easily represented by a small circuit. For predicates <InlineEquation ID="IEq3"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq3.gif" Format="GIF" Height="17" Rendition="HTML" Resolution="72" Type="Linedraw" Width="76" /> </InlineMediaObject> <EquationSource Format="TEX">\(P_1,\dots ,P_n\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <msub> <mi>P</mi> <mn>1</mn> </msub> <mo>,</mo> <mo>⋯</mo> <mo>,</mo> <msub> <mi>P</mi> <mi>n</mi> </msub> </mrow> </math></EquationSource> </InlineEquation> individually associated with a <InlineEquation ID="IEq4"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="18" /> </InlineMediaObject> <EquationSource Format="TEX">\(\varSigma \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>Σ</mi> </math></EquationSource> </InlineEquation>-protocol, and a predicate <i>C</i> represented by a Boolean circuit, we construct a <InlineEquation ID="IEq5"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="18" /> </InlineMediaObject> <EquationSource Format="TEX">\(\varSigma \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>Σ</mi> </math></EquationSource> </InlineEquation>-protocol for proving <InlineEquation ID="IEq6"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="12095_2025_827_Article_IEq6.gif" Format="GIF" Height="19" Rendition="HTML" Resolution="72" Type="Linedraw" Width="101" /> </InlineMediaObject> <EquationSource Format="TEX">\(C(P_1,\dots ,P_n)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>C</mi> <mo stretchy="false">(</mo> <msub> <mi>P</mi> <mn>1</mn> </msub> <mo>,</mo> <mo>⋯</mo> <mo>,</mo> <msub> <mi>P</mi> <mi>n</mi> </msub> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> = 1. This result answers positively an open question posed by Abe, et. al. (<CitationRef CitationID="CR2">2021</CitationRef>).</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Hybrid zero-knowledge from garbled circuits

  • Masayuki Abe,
  • Miguel Ambrona,
  • Miyako Ohkubo

摘要

We present techniques for constructing zero-knowledge argument systems from garbled circuits, extending the GC-to-ZK compiler by Jawurek Et al. (2013) and the GC-to- \(\varSigma \) Σ compiler by Hazay and Venkitasubramaniam (2020) to the following directions: − Our schemes are hybrid, commit-and-prove zero-knowledge argument systems that establish a connection between secrets embedded in algebraic commitments and a relation represented by a Boolean circuit. − Our schemes incorporate diverse cross-domain secrets embedded within distinct algebraic commitments, simultaneously supporting Pedersen-like commitments and lattice-based commitments. As an application, we develop circuit-represented compositions of \(\varSigma \) Σ -protocols that support attractive access structures, such as weighted thresholds, that can be easily represented by a small circuit. For predicates \(P_1,\dots ,P_n\) P 1 , , P n individually associated with a \(\varSigma \) Σ -protocol, and a predicate C represented by a Boolean circuit, we construct a \(\varSigma \) Σ -protocol for proving \(C(P_1,\dots ,P_n)\) C ( P 1 , , P n ) = 1. This result answers positively an open question posed by Abe, et. al. (2021).