Paper 2016/128

Removing the Strong RSA Assumption from Arguments over the Integers

Geoffroy Couteau, Thomas Peters, and David Pointcheval

Abstract

Committing integers and proving relations between them is an essential ingredient in many cryptographic protocols. Among them, range proofs have shown to be fundamental. They consist in proving that a committed integer lies in a public interval, which can be seen as a particular case of the more general Diophantine relations: for the committed vector of integers x, there exists a vector of integers w such that P (x,w) = 0, where P is a polynomial. In this paper, we revisit the security strength of the statistically hiding commitment scheme over the integers due to Damgard-Fujisaki, and the zero-knowledge proofs of knowledge of openings. Our first main contribution shows how to remove the Strong RSA assumption and replace it by the standard RSA assumption in the security proofs. This improvement naturally extends to generalized commitments and more complex proofs without modifying the original protocols. As a second contribution, we design an interactive technique turning commitment scheme over the integers into commitment scheme modulo a prime p. Still under the RSA assumption, this results in more efficient proofs of relations between committed values. Our methods thus improve upon existing proof systems for Diophantine relations both in terms of performance and security. We illustrate that with more efficient range proofs under the sole RSA assumption.

Metadata
Available format(s)
PDF
Publication info
Preprint. MINOR revision.
Keywords
Public-key cryptographyCommitment schemesInteractive arguments of knowledgeZero- knowledge proofsRSA assumption.
Contact author(s)
geoffroy couteau @ ens fr
History
2016-10-12: last of 2 revisions
2016-02-14: received
See all versions
Short URL
https://ia.cr/2016/128
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2016/128,
      author = {Geoffroy Couteau and Thomas Peters and David Pointcheval},
      title = {Removing the Strong RSA Assumption from Arguments over the Integers},
      howpublished = {Cryptology ePrint Archive, Paper 2016/128},
      year = {2016},
      note = {\url{https://eprint.iacr.org/2016/128}},
      url = {https://eprint.iacr.org/2016/128}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.