Cryptology ePrint Archive: Report 2021/934

ECLIPSE: Enhanced Compiling method for Pedersen-committed zkSNARK Engines

Diego F. Aranha and Emil Madsen Bennedsen and Matteo Campanelli and Chaya Ganesh and Claudio Orlandi and Akira Takahashi

Abstract: We advance the state-of-the art for zero-knowledge commit-and-prove SNARKs (CP-SNARKs). CP-SNARKs are an important class of SNARKs which, using commitments as ``glue'', allow to efficiently combine proof systems---e.g., general-purpose SNARKs (an efficient way to prove statements about circuits) and $\Sigma$-protocols (an efficient way to prove statements about group operations). Thus, CP-SNARKs allow to efficiently provide zero-knowledge proofs for composite statements such as $h=H(g^{x})$ for some hash-function $H$.

Our main contribution is providing the first construction of CP-SNARKs where the proof size is succinct in the number of commitments.

We achieve our result by providing a general technique to compile Algebraic Holographic Proofs (AHP) (an underlying abstraction used in many modern SNARKs) with special ``decomposition'' properties into an efficient CP-SNARK. We then show that some of the most efficient AHP constructions---Marlin, PLONK, and Sonic---satisfy our compilation requirements.

Our resulting SNARKs achieve universal and updatable reference strings, which are highly desirable features as they greatly reduce the trust needed in the SNARK setup phase.

Category / Keywords: cryptographic protocols / SNARK, commit-and-prove, Sigma protocol

Date: received 9 Jul 2021, last revised 16 Sep 2021

Contact author: dfaranha at cs au dk, masik7 at gmail com, matteo at cs au dk, chaya at iisc ac in, orlandi at cs au dk, takahashi at cs au dk

Available format(s): PDF | BibTeX Citation

Note: Major revision: technical overview, concrete applications, bug fixes in CP-Marlin, etc.

Version: 20210917:043326 (All versions of this report)

Short URL: ia.cr/2021/934


[ Cryptology ePrint archive ]