Cryptology ePrint Archive: Report 2015/195
Zero-knowledge Argument for Polynomial Evaluation with Application to Blacklists
Stephanie Bayer and Jens Groth
Abstract: Verification of a polynomial’s evaluation in a secret committed value plays a role in cryptographic applications such as non-membership or membership proofs. We construct a novel special honest verifier zero-knowledge argument for correct polynomial evaluation. The argument has logarithmic communication cost in the degree of the polynomial, which is a significant improvement over the state of the art with cubic root complexity at best. The argument is relatively efficient to generate and very fast to verify compared to previous work. The argument has a simple public-coin 3-move structure and only relies on the discrete logarithm assumption.
The polynomial evaluation argument can be used as a building block to construct zero-knowledge membership and non-membership arguments with communication that is logarithmic in the size of the blacklist. Non-membership proofs can be used to design anonymous blacklisting schemes allowing online services to block misbehaving users without learning the identity of the user. They also allow the blocking of single users of anonymization networks without blocking the whole
network.
Category / Keywords: cryptographic protocols / Zero-knowledge argument, discrete logarithm, polynomial evaluation, anonymous blacklisting, membership and non-membership proofs
Original Publication (in the same form): IACR-EUROCRYPT-2013
DOI: 10.1007/978-3-642-38348-9_38
Date: received 3 Mar 2015
Contact author: j groth at ucl ac uk
Available format(s): PDF | BibTeX Citation
Version: 20150304:164121 (All versions of this report)
Short URL: ia.cr/2015/195
[ Cryptology ePrint archive ]