Sigma protocols ( \(\varSigma \) -protocols) provide a foundational paradigm for constructing secure algorithms in privacy-preserving applications. To enhance efficiency, several extended models [BG18], [BBB+18], [AC20] incorporating various optimization techniques have been proposed as “replacements” for the original \(\varSigma \) -protocol. However, these models often lack the expressiveness needed to handle complex relations and hinder designers from applying appropriate instantiation and optimization strategies. In this paper, we introduce a novel compressed \(\varSigma \) -protocol model that effectively addresses these limitations by providing concrete constructions for relations involving non-linear constraints. Our approach is sufficiently expressive to encompass a wide range of relations. Central to our model is the definition of doubly folded commitments, which, along with a proposed Argument of Knowledge, generalizes the compression and amortization processes found in previous models. Despite the ability to express more relations, this innovation also provides a foundation to discuss a general aggregation technique, optimizing the proof size of instantiated schemes. To demonstrate the above statements, we provide a brief review of several existing protocols that can be instantiated using our model to demonstrate the versatility of our construction. We also present use cases where our generalized model enhances applications traditionally considered “less compact”, such as binary proofs [BCC+15] and k-out-of-n proofs [ACF21]. In conclusion, our new model offers a more efficient and expressive alternative to the current use of \(\varSigma \) -protocols, paving the way for broader applicability and optimization in cryptographic applications.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Compressed Sigma Protocols: New Model and Aggregation Techniques

  • Yuxi Xue,
  • Tianyu Zheng,
  • Shang Gao,
  • Bin Xiao,
  • Man Ho Au

摘要

Sigma protocols ( \(\varSigma \) -protocols) provide a foundational paradigm for constructing secure algorithms in privacy-preserving applications. To enhance efficiency, several extended models [BG18], [BBB+18], [AC20] incorporating various optimization techniques have been proposed as “replacements” for the original \(\varSigma \) -protocol. However, these models often lack the expressiveness needed to handle complex relations and hinder designers from applying appropriate instantiation and optimization strategies. In this paper, we introduce a novel compressed \(\varSigma \) -protocol model that effectively addresses these limitations by providing concrete constructions for relations involving non-linear constraints. Our approach is sufficiently expressive to encompass a wide range of relations. Central to our model is the definition of doubly folded commitments, which, along with a proposed Argument of Knowledge, generalizes the compression and amortization processes found in previous models. Despite the ability to express more relations, this innovation also provides a foundation to discuss a general aggregation technique, optimizing the proof size of instantiated schemes. To demonstrate the above statements, we provide a brief review of several existing protocols that can be instantiated using our model to demonstrate the versatility of our construction. We also present use cases where our generalized model enhances applications traditionally considered “less compact”, such as binary proofs [BCC+15] and k-out-of-n proofs [ACF21]. In conclusion, our new model offers a more efficient and expressive alternative to the current use of \(\varSigma \) -protocols, paving the way for broader applicability and optimization in cryptographic applications.