Cryptology ePrint Archive: Report 2020/256

Statistical ZAPR Arguments from Bilinear Maps

Alex Lombardi and Vinod Vaikuntanathan and Daniel Wichs

Abstract: Dwork and Naor (FOCS '00) defined ZAPs as 2-message witness-indistinguishable proofs that are public-coin. We relax this to ``ZAPs with private randomness'' (ZAPRs), where the verifier can use private coins to sample the first message (independently of the statement being proved), but the proof must remain publicly verifiable given only the protocol transcript. In particular, ZAPRs are reusable, meaning that the first message can be reused for multiple proofs without compromising security.

Known constructions of ZAPs from trapdoor permutations or bilinear maps are only computationally WI (and statistically sound). Two recent results of Badrinarayanan-Fernando-Jain-Khurana-Sahai and Goyal-Jain-Jin-Malavolta [EUROCRYPT '20] construct the first statistical ZAP arguments, which are statistically WI (and computationally sound), from the quasi-polynomial LWE assumption. Here, we construct statistical ZAPR arguments from the quasi-polynomial decision-linear (DLIN) assumption on groups with a bilinear map. Our construction relies on a combination of several tools, including the Groth-Ostrovsky-Sahai NIZK and NIWI [EUROCRYPT '06, CRYPTO '06, JACM '12], ``sometimes-binding statistically hiding commitments'' [Kalai-Khurana-Sahai, EUROCRYPT '18] and the ``MPC-in-the-head'' technique [Ishai-Kushilevitz-Ostrovsky-Sahai, STOC '07].

Category / Keywords: cryptographic protocols / ZAPs, Statistical Witness Indistinguishability

Original Publication (with minor differences): IACR-EUROCRYPT-2020

Date: received 25 Feb 2020, last revised 25 Feb 2020

Contact author: alexjl at mit edu

Available format(s): PDF | BibTeX Citation

Version: 20200225:204549 (All versions of this report)

Short URL: ia.cr/2020/256