Simultaneously Resettable Arguments of Knowledge
نویسندگان
چکیده
In this work, we study simultaneously resettable arguments of knowledge. As our main result, we show a construction of a constantround simultaneously resettable witness-indistinguishable argument of knowledge (simresWIAoK, for short) for any NP language. We also show two applications of simresWIAoK: the first constant-round simultaneously resettable zero-knowledge argument of knowledge in the Bare Public-Key Model; and the first simultaneously resettable identification scheme which follows the knowledge extraction paradigm.
منابع مشابه
Resettably-Sound Resettable Zero Knowledge Arguments for NP
We construct resettably-sound resettable zero knowledge arguments for NP based on standard hardness assumption (the existence of claw-free permutations) in the plain model. This proves the simultaneous resettability conjecture posed by Barak et al. in [FOCS 2001]. Our construction, inspired by the paradigm for designing concurrent zero knowledge protocols, makes crucial use of a tool called ins...
متن کاملInstance-Dependent Verifiable Random Functions and Their Application to Simultaneous Resettability
We introduce a notion of instance-dependent verifiable random functions (InstD-VRFs for short). Informally, an InstD-VRF is, in some sense, a verifiable random function [23] with a special public key, which is generated via a (possibly)interactive protocol and contains an instance y ∈ L ∩ {0, 1}∗ for a specific NP language L, but the security requirements on such a function are relaxed: we only...
متن کاملResettably-Sound Zero-Knowledge and its Applications
Resettably-sound proofs and arguments remain sound even when the prover can reset the verifier, and so force it to use the same random coins in repeated executions of the protocol. We show that resettably-sound zero-knowledge arguments for NP exist if collision-resistant hash functions exist. In contrast, resettably-sound zero-knowledge proofs are possible only for languages in P/poly. We prese...
متن کاملNearly Simultaneously Resettable Black-Box Zero Knowledge
An important open question in Cryptography concerns the possibility of achieving secure protocols even in the presence of physical attacks. Here we focus on the case of proof systems where an adversary forces the honest player to re-use its randomness in different executions. In 2009, Deng, Goyal and Sahai [1] constructed a simultaneously resettable non-black-box zero-knowledge argument system ...
متن کاملResettable Zero-Knowledge
We introduce the notion of Resettable Zero-Knowledge (rZK), a new security measure for cryptographic protocols which strengthens the classical notion of zero-knowledge. In essence, an rZK protocol is one that remains zero knowledge even if an adversary can interact with the prover many times, each time resetting the prover to its initial state and forcing it to use the same random tape. All kno...
متن کامل