Rate-1 non-interactive arguments for batch-NP

Succinct non-interactive arguments for batch-NP computations, called BARGs (Choudhuri, Jain and Jin, STOC 2021), have emerged as a powerful tool to construct succinct non-interactive arguments (SNARGs) for expressive classes of computations such as all deterministic computations (P), time-space boun...

Full description

Bibliographic Details
Main Author: Devadas, Lalita
Other Authors: Vaikuntanathan, Vinod
Format: Thesis
Published: Massachusetts Institute of Technology 2022
Online Access:https://hdl.handle.net/1721.1/144943
_version_ 1826211867356299264
author Devadas, Lalita
author2 Vaikuntanathan, Vinod
author_facet Vaikuntanathan, Vinod
Devadas, Lalita
author_sort Devadas, Lalita
collection MIT
description Succinct non-interactive arguments for batch-NP computations, called BARGs (Choudhuri, Jain and Jin, STOC 2021), have emerged as a powerful tool to construct succinct non-interactive arguments (SNARGs) for expressive classes of computations such as all deterministic computations (P), time-space bounded non-deterministic computations (NTISP), and so on. A BARG gives us a way to prove k NP statements where the size of the proof (resp. the verification time) is proportional to the size of a single witness (resp. the time for a single NP verification). We present a rate-1 construction of a publicly verifiable non-interactive argument system for batch-NP (also called a BARG), under the LWE assumption. Namely, a proof corresponding to a batch of k NP statements each with an m-bit witness, has size m + poly(λ). In contrast, prior work either relied on non-standard knowledge assumptions, or produced proofs of size m · poly(λ) (Kalai, Paneth, and Yang, STOC 2019, and Choudhuri, Jain, and Jin, STOC 2021). The soundness of our construction relies on the learning with errors (LWE) assumption. We also observe we can obtain an incrementally verifiable computation (IVC) scheme for arbitrary deterministic computations, even beyond P; a multi-hop BARG scheme for NP; and a multi-hop aggregate signature scheme, in the standard model, with unbounded and universal aggregation. Prior to this work, IVC schemes were only known for P under a bilinear map assumption, and beyond P only under non-standard knowledge assumptions or in the random oracle model; multi-hop BARGs were only known under non-standard knowledge assumptions or in the random oracle model; and aggregate signatures were only known under indistinguishability obfuscation (and RSA) or in the random oracle model.
first_indexed 2024-09-23T15:12:41Z
format Thesis
id mit-1721.1/144943
institution Massachusetts Institute of Technology
last_indexed 2024-09-23T15:12:41Z
publishDate 2022
publisher Massachusetts Institute of Technology
record_format dspace
spelling mit-1721.1/1449432022-08-30T03:11:35Z Rate-1 non-interactive arguments for batch-NP Devadas, Lalita Vaikuntanathan, Vinod Kalai, Yael Tauman Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science Succinct non-interactive arguments for batch-NP computations, called BARGs (Choudhuri, Jain and Jin, STOC 2021), have emerged as a powerful tool to construct succinct non-interactive arguments (SNARGs) for expressive classes of computations such as all deterministic computations (P), time-space bounded non-deterministic computations (NTISP), and so on. A BARG gives us a way to prove k NP statements where the size of the proof (resp. the verification time) is proportional to the size of a single witness (resp. the time for a single NP verification). We present a rate-1 construction of a publicly verifiable non-interactive argument system for batch-NP (also called a BARG), under the LWE assumption. Namely, a proof corresponding to a batch of k NP statements each with an m-bit witness, has size m + poly(λ). In contrast, prior work either relied on non-standard knowledge assumptions, or produced proofs of size m · poly(λ) (Kalai, Paneth, and Yang, STOC 2019, and Choudhuri, Jain, and Jin, STOC 2021). The soundness of our construction relies on the learning with errors (LWE) assumption. We also observe we can obtain an incrementally verifiable computation (IVC) scheme for arbitrary deterministic computations, even beyond P; a multi-hop BARG scheme for NP; and a multi-hop aggregate signature scheme, in the standard model, with unbounded and universal aggregation. Prior to this work, IVC schemes were only known for P under a bilinear map assumption, and beyond P only under non-standard knowledge assumptions or in the random oracle model; multi-hop BARGs were only known under non-standard knowledge assumptions or in the random oracle model; and aggregate signatures were only known under indistinguishability obfuscation (and RSA) or in the random oracle model. S.M. 2022-08-29T16:22:36Z 2022-08-29T16:22:36Z 2022-05 2022-06-21T19:25:42.316Z Thesis https://hdl.handle.net/1721.1/144943 0000-0002-6869-8690 In Copyright - Educational Use Permitted Copyright MIT http://rightsstatements.org/page/InC-EDU/1.0/ application/pdf Massachusetts Institute of Technology
spellingShingle Devadas, Lalita
Rate-1 non-interactive arguments for batch-NP
title Rate-1 non-interactive arguments for batch-NP
title_full Rate-1 non-interactive arguments for batch-NP
title_fullStr Rate-1 non-interactive arguments for batch-NP
title_full_unstemmed Rate-1 non-interactive arguments for batch-NP
title_short Rate-1 non-interactive arguments for batch-NP
title_sort rate 1 non interactive arguments for batch np
url https://hdl.handle.net/1721.1/144943
work_keys_str_mv AT devadaslalita rate1noninteractiveargumentsforbatchnp