Anzeige
Erschienen in:
2015 | OriginalPaper | Buchkapitel
QA-NIZK Arguments in Asymmetric Groups: New Tools and New Constructions
verfasst von : Alonso González, Alejandro Hevia, Carla Ràfols
Erschienen in: Advances in Cryptology -- ASIACRYPT 2015
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
A sequence of recent works have constructed constant-size quasi-adaptive (QA) NIZK arguments of membership in linear subspaces of \(\hat{\mathbb {G}}^m\), where \(\hat{\mathbb {G}}\) is a group equipped with a bilinear map \(e:\hat{\mathbb {G}} \times \check{\mathbb {H}} \rightarrow \mathbb {T}\). Although applicable to any bilinear group, these techniques are less useful in the asymmetric case. For example, Jutla and Roy (Crypto 2014) show how to do QA aggregation of Groth-Sahai proofs, but the types of equations which can be aggregated are more restricted in the asymmetric setting. Furthermore, there are natural statements which cannot be expressed as membership in linear subspaces, for example the satisfiability of quadratic equations.
In this paper we develop specific techniques for asymmetric groups. We introduce a new computational assumption, under which we can recover all the aggregation results of Groth-Sahai proofs known in the symmetric setting. We adapt the arguments of membership in linear spaces of \(\hat{\mathbb {G}}^m\) to linear subspaces of \(\hat{\mathbb {G}}^{m} \times \check{\mathbb {H}}^{n}\). In particular, we give a constant-size argument that two sets of Groth-Sahai commitments, defined over different groups \(\hat{\mathbb {G}},\check{\mathbb {H}}\), open to the same scalars in \(\mathbb {Z}_q\), a useful tool to prove satisfiability of quadratic equations in \(\mathbb {Z}_q\). We then use one of the arguments for subspaces in \(\hat{\mathbb {G}}^{m} \times \check{\mathbb {H}}^{n}\) and develop new techniques to give constant-size QA-NIZK proofs that a commitment opens to a bit-string. To the best of our knowledge, these are the first constant-size proofs for quadratic equations in \(\mathbb {Z}_q\) under standard and falsifiable assumptions. As a result, we obtain improved threshold Groth-Sahai proofs for pairing product equations, ring signatures, proofs of membership in a list, and various types of signature schemes.