Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3
With the increasing demand for privacy protection in the blockchain, the universal zero-knowledge proof protocol has been developed and widely used. Because hash function is an important cryptographic primitive in a blockchain, the zero-knowledge proof of hash preimage has a wide range of applicatio...
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-08-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/22/16/5951 |
| _version_ | 1797431714273820672 |
|---|---|
| author | Yang Yang Shangbin Han Ping Xie Yan Zhu Zhenyang Ding Shengjie Hou Shicheng Xu Haibin Zheng |
| author_facet | Yang Yang Shangbin Han Ping Xie Yan Zhu Zhenyang Ding Shengjie Hou Shicheng Xu Haibin Zheng |
| author_sort | Yang Yang |
| collection | DOAJ |
| description | With the increasing demand for privacy protection in the blockchain, the universal zero-knowledge proof protocol has been developed and widely used. Because hash function is an important cryptographic primitive in a blockchain, the zero-knowledge proof of hash preimage has a wide range of application scenarios. However, it is hard to implement it due to the transformation of efficiency and execution complexity. Currently, there are only zero-knowledge proof circuits of some widely used hash functions that have been implemented, such as SHA256. SM3 is a Chinese hash function standard published by the Chinese Commercial Cryptography Administration Office for the use of electronic authentication service systems, and hence might be used in several cryptographic applications in China. As the national cryptographic hash function standard, the zero-knowledge proof circuit of SM3 (Chinese Commercial Cryptography) has not been implemented. Therefore, this paper analyzed the SM3 algorithm process, designed a new layered circuit structure, and implemented the SM3 hash preimage zero-knowledge proof circuit with a circuit size reduced by half compared to the automatic generator. Moreover, we proposed several extended practical protocols based on the SM3 zero-knowledge proof circuit, which is widely used in blockchain. |
| first_indexed | 2024-03-09T09:50:17Z |
| format | Article |
| id | doaj.art-bd7aaecfb14a4aeca39cfc10515bb3df |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-03-09T09:50:17Z |
| publishDate | 2022-08-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-bd7aaecfb14a4aeca39cfc10515bb3df2023-12-02T00:16:12ZengMDPI AGSensors1424-82202022-08-012216595110.3390/s22165951Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3Yang Yang0Shangbin Han1Ping Xie2Yan Zhu3Zhenyang Ding4Shengjie Hou5Shicheng Xu6Haibin Zheng7School of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaSchool of Cyber Science and Technology, Beihang University, Beijing 100191, ChinaNational Innovation Institute of Defense Technology, Academy of Military Sciences, Beijing 100071, ChinaNeusoft Corporation, Shenyang 110179, ChinaHangzhou Innovation Institute, Beihang University, Hangzhou 310051, ChinaWith the increasing demand for privacy protection in the blockchain, the universal zero-knowledge proof protocol has been developed and widely used. Because hash function is an important cryptographic primitive in a blockchain, the zero-knowledge proof of hash preimage has a wide range of application scenarios. However, it is hard to implement it due to the transformation of efficiency and execution complexity. Currently, there are only zero-knowledge proof circuits of some widely used hash functions that have been implemented, such as SHA256. SM3 is a Chinese hash function standard published by the Chinese Commercial Cryptography Administration Office for the use of electronic authentication service systems, and hence might be used in several cryptographic applications in China. As the national cryptographic hash function standard, the zero-knowledge proof circuit of SM3 (Chinese Commercial Cryptography) has not been implemented. Therefore, this paper analyzed the SM3 algorithm process, designed a new layered circuit structure, and implemented the SM3 hash preimage zero-knowledge proof circuit with a circuit size reduced by half compared to the automatic generator. Moreover, we proposed several extended practical protocols based on the SM3 zero-knowledge proof circuit, which is widely used in blockchain.https://www.mdpi.com/1424-8220/22/16/5951SM3zero-knowledge proofarithmetic circuitprivacy preserving |
| spellingShingle | Yang Yang Shangbin Han Ping Xie Yan Zhu Zhenyang Ding Shengjie Hou Shicheng Xu Haibin Zheng Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 Sensors SM3 zero-knowledge proof arithmetic circuit privacy preserving |
| title | Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 |
| title_full | Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 |
| title_fullStr | Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 |
| title_full_unstemmed | Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 |
| title_short | Implementation and Optimization of Zero-Knowledge Proof Circuit Based on Hash Function SM3 |
| title_sort | implementation and optimization of zero knowledge proof circuit based on hash function sm3 |
| topic | SM3 zero-knowledge proof arithmetic circuit privacy preserving |
| url | https://www.mdpi.com/1424-8220/22/16/5951 |
| work_keys_str_mv | AT yangyang implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT shangbinhan implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT pingxie implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT yanzhu implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT zhenyangding implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT shengjiehou implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT shichengxu implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 AT haibinzheng implementationandoptimizationofzeroknowledgeproofcircuitbasedonhashfunctionsm3 |