3-Message Zero Knowledge Against Human Ignorance

The notion of Zero Knowledge has driven the field of cryptography since its conception over thirty years ago. It is well established that two-message zero-knowledge protocols for NP do not exist, and that four-message zero-knowledge arguments exist under the minimal assumption of one-way functions....

Full description

Bibliographic Details
Main Authors: Bitansky, Nir, Brakerski, Zvika, Kalai, Yael, Paneth, Omer, Vaikuntanathan, Vinod
Other Authors: Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Format: Article
Language:en_US
Published: Springer-Verlag 2017
Online Access:http://hdl.handle.net/1721.1/111007
https://orcid.org/0000-0001-8361-6035
https://orcid.org/0000-0002-2666-0045
_version_ 1826209084140945408
author Bitansky, Nir
Brakerski, Zvika
Kalai, Yael
Paneth, Omer
Vaikuntanathan, Vinod
author2 Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
author_facet Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Bitansky, Nir
Brakerski, Zvika
Kalai, Yael
Paneth, Omer
Vaikuntanathan, Vinod
author_sort Bitansky, Nir
collection MIT
description The notion of Zero Knowledge has driven the field of cryptography since its conception over thirty years ago. It is well established that two-message zero-knowledge protocols for NP do not exist, and that four-message zero-knowledge arguments exist under the minimal assumption of one-way functions. Resolving the precise round complexity of zero-knowledge has been an outstanding open problem for far too long. In this work, we present a three-message zero-knowledge argument system with soundness against uniform polynomial-time cheating provers. The main component in our construction is the recent delegation protocol for RAM computations (Kalai and Paneth, TCC 2016B and Brakerski, Holmgren and Kalai, ePrint 2016). Concretely, we rely on a three-message variant of their protocol based on a key-less collision-resistant hash functions secure against uniform adversaries as well as other standard primitives. More generally, beyond uniform provers, our protocol provides a natural and meaningful security guarantee against real-world adversaries, which we formalize following Rogaway’s “human-ignorance” approach (VIETCRYPT 2006): in a nutshell, we give an explicit uniform reduction from any adversary breaking the soundness of our protocol to finding collisions in the underlying hash function.
first_indexed 2024-09-23T14:17:00Z
format Article
id mit-1721.1/111007
institution Massachusetts Institute of Technology
language en_US
last_indexed 2024-09-23T14:17:00Z
publishDate 2017
publisher Springer-Verlag
record_format dspace
spelling mit-1721.1/1110072022-10-01T20:21:43Z 3-Message Zero Knowledge Against Human Ignorance Bitansky, Nir Brakerski, Zvika Kalai, Yael Paneth, Omer Vaikuntanathan, Vinod Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science Bitansky, Nir Vaikuntanathan, Vinod The notion of Zero Knowledge has driven the field of cryptography since its conception over thirty years ago. It is well established that two-message zero-knowledge protocols for NP do not exist, and that four-message zero-knowledge arguments exist under the minimal assumption of one-way functions. Resolving the precise round complexity of zero-knowledge has been an outstanding open problem for far too long. In this work, we present a three-message zero-knowledge argument system with soundness against uniform polynomial-time cheating provers. The main component in our construction is the recent delegation protocol for RAM computations (Kalai and Paneth, TCC 2016B and Brakerski, Holmgren and Kalai, ePrint 2016). Concretely, we rely on a three-message variant of their protocol based on a key-less collision-resistant hash functions secure against uniform adversaries as well as other standard primitives. More generally, beyond uniform provers, our protocol provides a natural and meaningful security guarantee against real-world adversaries, which we formalize following Rogaway’s “human-ignorance” approach (VIETCRYPT 2006): in a nutshell, we give an explicit uniform reduction from any adversary breaking the soundness of our protocol to finding collisions in the underlying hash function. National Science Foundation (U.S.) (Award CNS-1350619) National Science Foundation (U.S.) (Award CNS-1413964) 2017-08-23T19:25:34Z 2017-08-23T19:25:34Z 2016-10 Article http://purl.org/eprint/type/ConferencePaper 978-3-662-53640-7 978-3-662-53641-4 0302-9743 1611-3349 http://hdl.handle.net/1721.1/111007 Bitansky, Nir et al. “3-Message Zero Knowledge Against Human Ignorance.” Hirt, M. and Smith, A., editors. Theory of Cryptography. TCC 2016. Lecture Notes in Computer Science 9985 (2016): 57–83 © 2016 International Association for Cryptologic Research https://orcid.org/0000-0001-8361-6035 https://orcid.org/0000-0002-2666-0045 en_US http://dx.doi.org/10.1007/978-3-662-53641-4_3 Theory of Cryptography Creative Commons Attribution-Noncommercial-Share Alike http://creativecommons.org/licenses/by-nc-sa/4.0/ application/pdf Springer-Verlag MIT Web Domain
spellingShingle Bitansky, Nir
Brakerski, Zvika
Kalai, Yael
Paneth, Omer
Vaikuntanathan, Vinod
3-Message Zero Knowledge Against Human Ignorance
title 3-Message Zero Knowledge Against Human Ignorance
title_full 3-Message Zero Knowledge Against Human Ignorance
title_fullStr 3-Message Zero Knowledge Against Human Ignorance
title_full_unstemmed 3-Message Zero Knowledge Against Human Ignorance
title_short 3-Message Zero Knowledge Against Human Ignorance
title_sort 3 message zero knowledge against human ignorance
url http://hdl.handle.net/1721.1/111007
https://orcid.org/0000-0001-8361-6035
https://orcid.org/0000-0002-2666-0045
work_keys_str_mv AT bitanskynir 3messagezeroknowledgeagainsthumanignorance
AT brakerskizvika 3messagezeroknowledgeagainsthumanignorance
AT kalaiyael 3messagezeroknowledgeagainsthumanignorance
AT panethomer 3messagezeroknowledgeagainsthumanignorance
AT vaikuntanathanvinod 3messagezeroknowledgeagainsthumanignorance