Paper 1999/014
Concurrent Zero-Knowledge is Easy in Practice
Ivan Damgard
Abstract
We show that if any one-way function exists, then 3-round concurrent zero-knowledge arguments for all NP problems can be built in a model where a short auxiliary string with a prescribed distribution is available to the players. We also show that all known efficient identification schemes using specialized assumptions can be modified to work in this model with no essential loss of efficiency. We argue that the assumptions of the model will be satisfied in most practical scenarios where public key cryptography is used, in particular our construction works given any secure public key infrastructure. Finally, we point out that in a model with preprocessing (and no auxiliary string) proposed earlier, concurrent zero-knowledge for NP can be based on any one-way function.
Metadata
- Available format(s)
- PS
- Publication info
- Published elsewhere. Appeared in the THEORY OF CRYPTOGRAPHY LIBRARY and has been included in the ePrint Archive.
- Keywords
- Concurrent Zero-KnowledgeProtocolsProofs of knowledge.
- Contact author(s)
- ivan @ daimi aau dk
- History
- 1999-07-28: revised
- 1999-06-16: received
- Short URL
- https://ia.cr/1999/014
- License
-
CC BY
BibTeX
@misc{cryptoeprint:1999/014,
author = {Ivan Damgard},
title = {Concurrent Zero-Knowledge is Easy in Practice},
howpublished = {Cryptology ePrint Archive, Paper 1999/014},
year = {1999},
note = {\url{https://eprint.iacr.org/1999/014}},
url = {https://eprint.iacr.org/1999/014}
}
