Generic and Practical Resettable Zero-Knowledge in the Bare Public-Key Model

  • Authors:
  • Moti Yung;Yunlei Zhao

  • Affiliations:
  • RSA Laboratories and Department of Computer Science, Columbia University, New York, NY, USA;Software School, Fudan University, Shanghai 200433, China

  • Venue:
  • EUROCRYPT '07 Proceedings of the 26th annual international conference on Advances in Cryptology
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present a generic construction for constant-round concurrsound resettable zero-knowledge (rZK-CS) arguments for $\mathcal{NP}$ in the bare public-key (BPK) model under any (sub-exponentially strong) one-way function (OWF), which is a traditional assumption in this area. The generic construction in turn allows round-optimal implementation for $\mathcal{NP}$ still under general assumptions, and can be converted into a highly practical instantiation (under specific number-theoretic assumptions) for any language admitting Σ-protocols. Further, the rZK-CS arguments developed in this work also satisfy a weak (black-box) concurrent knowledge-extractability property as proofs of knowledge, in which case some super-polynomial-time assumption is intrinsic.