Non-interactive Zero-Knowledge in Pairing-Free Groups from Weaker Assumptions - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Non-interactive Zero-Knowledge in Pairing-Free Groups from Weaker Assumptions

Geoffroy Couteau
Shuichi Katsumata
  • Fonction : Auteur
  • PersonId : 1113018
Bogdan Ursu
  • Fonction : Auteur
  • PersonId : 1084656

Résumé

We provide two new constructions of non-interactive zero-knowledge arguments (NIZKs) for NP from discrete-logarithm-style assumptions over cyclic groups, without relying on pairings. A previous construction from (Canetti et al., Eurocrypt'18) achieves such NIZKs under the assumption that no efficient adversary can break the key-dependent message (KDM) security of (additive) ElGamal with respect to all (even inefficient) functions over groups of size 2 λ , with probability better than poly(λ)/2 λ. This is an extremely strong, non-falsifiable assumption. In particular, even mild (polynomial) improvements over the current best known attacks on the discrete logarithm problem would already contradict this assumption. (Canetti et al. STOC'19) describe how to improve the assumption to rely only on KDM security with respect to efficient functions while additionally assuming public-key encryption schemes, therefore obtaining an assumption that is (in spirit) falsifiable. Our first construction improves this state of affairs. We provide a construction of NIZKs for NP under the CDH assumption together with the assumption that no efficient adversary can break the key-dependent message one-wayness of ElGamal with respect to efficient functions over groups of size 2 λ , with probability better than poly(λ)/2 cλ (denoted 2 −cλ-OW-KDM), for a constant c = 3/4. Unlike the previous assumption, our assumption leaves an exponential gap between the best known attack and the required security guarantee. Our second construction is interested in the case where CDH does not hold. Namely, as a second contribution, we construct an infinitely often NIZK argument system for NP (where soundness and zero-knowledge are only guaranteed to hold for infinitely many security parameters), under the assumption that CDH is easy together with the 2 −cλ-OW-KDM security of ElGamal with c = 28/29 + o(1) and the existence of low-depth pseudorandom generators (PRG). Combining our two results, we obtain a construction of (infinitely-often) NIZKs for NP under the 2 −cλ-OW-KDM security of ElGamal with c = 28/29 + o(1) and the existence of low-depth PRG, independently of whether CDH holds. To our knowledge, since neither OW-KDM security of ElGamal nor low-depth PRGs are known to imply public key encryption, this provides the first construction of NIZKs from concrete and falsifiable Minicrypt-style assumptions.
Fichier principal
Vignette du fichier
2020-535.pdf (736.9 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03374153 , version 1 (11-10-2021)

Identifiants

Citer

Geoffroy Couteau, Shuichi Katsumata, Bogdan Ursu. Non-interactive Zero-Knowledge in Pairing-Free Groups from Weaker Assumptions. EUROCRYPT 2020 - Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2020, En ligne, Netherlands. pp.442-471, ⟨10.1007/978-3-030-45727-3_15⟩. ⟨hal-03374153⟩
14 Consultations
105 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More