scholarly journals Zero-knowledge proofs for finite field arithmetic, or: Can zero-knowledge be for free?

1998 ◽  
pp. 424-441 ◽  
Author(s):  
Ronald Cramer ◽  
Ivan Damgård
Keyword(s):  
Finite Field ◽  
Zero Knowledge ◽  
Finite Field Arithmetic

Efficient semisystolic architectures for finite-field arithmetic

1998 ◽  
Vol 6 (1) ◽  
pp. 101-113 ◽  
Author(s):  
S.K. Jain ◽  
L. Song ◽  
K.K. Parhi
Keyword(s):  
Finite Field ◽  
Finite Field Arithmetic

scholarly journals Zero-Knowledge Proofs for Finite Field Arithmetic or: Can Zero-Knowledge be for Free?

1997 ◽  
Vol 4 (27) ◽  
Author(s):  
Ronald Cramer ◽  
Ivan B. Damgård
Keyword(s):  
Finite Field ◽  
Prime Order ◽  
Error Probability ◽  
Communication Complexity ◽  
Boolean Circuit ◽  
Interactive Proof ◽  
Zero Knowledge ◽  
Order Group ◽  
Prime Fields ◽  
Interactive Proof System

We present zero-knowledge proofs and arguments for arithmetic circuits over finite prime fields, namely given a circuit, show in zero-knowledge that inputs can be selected leading to a given output. For a field GF(q), where q is an n-bit prime, a<br />circuit of size O(n), and error probability 2^−n, our protocols require communication of O(n^2) bits. This is the same worst-cast complexity as the trivial (non zero-knowledge)<br />interactive proof where the prover just reveals the input values. If the circuit involves n multiplications, the best previously known methods would in general require communication<br />of  Omega(n^3 log n) bits.<br />Variations of the technique behind these protocols lead to other interesting applications.<br />We first look at the Boolean Circuit Satisfiability problem and give zero-knowledge proofs and arguments for a circuit of size n and error probability 2^−n in which there is an interactive preprocessing phase requiring communication of O(n^2)<br />bits. In this phase, the statement to be proved later need not be known. Later the prover can non-interactively prove any circuit he wants, i.e. by sending only one message, of size O(n) bits.<br />As a second application, we show that Shamirs (Shens) interactive proof system for the (IP-complete) QBF problem can be transformed to a zero-knowledge proof<br />system with the same asymptotic communication complexity and number of rounds. The security of our protocols can be based on any one-way group homomorphism with a particular set of properties. We give examples of special assumptions sufficient for this, including: the RSA assumption, hardness of discrete log in a prime order group, and polynomial security of Die-Hellman encryption. We note that the constants involved in our asymptotic complexities are small enough for our protocols to be practical with realistic choices of parameters.

Sign in / Sign up

Export Citation Format

Share Document