Zero-Knowledge for multivariate polynomials

  • Authors:
  • Valérie Nachef;Jacques Patarin;Emmanuel Volte

  • Affiliations:
  • Department of Mathematics, University of Cergy-Pontoise, CNRS UMR 8088, Cergy-Pontoise Cedex, France;PRISM, University of Versailles, Versailles Cedex, France;Department of Mathematics, University of Cergy-Pontoise, CNRS UMR 8088, Cergy-Pontoise Cedex, France

  • Venue:
  • LATINCRYPT'12 Proceedings of the 2nd international conference on Cryptology and Information Security in Latin America
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

In [15] a protocol ZK(2) using zero-knowledge argument of knowledge was designed from a solution of a set of multivariate quadratic equations over a finite field (i.e. from MQ problem). In this paper, we propose a new scheme ZK(d) which is a generalization of ZK(2), i.e. we consider systems of polynomials of degree d. The key idea of the scheme ZK(d) is to use a polarization identity that allows to get a d-linear function and then use a cut-and-choose technique. We also observe that the scheme $\tilde{ZK}(d)$, which is the natural generalization of the protocol based on the MQ problem to higher degree, is more efficient in terms of computations whereas the ZK(d) scheme is better in terms of bits to be sent. Moreover these properties are still true for all kinds of polynomials: for example if the polynomials are sparse or dense. Finally, we will present two examples of applications: with Brent equations, or with morphisms of polynomials.