Arithmetic Sketching

Dan Boneh; Elette Boyle; Henry Corrigan-Gibbs; Niv Gilboa; Yuval Ishai

Paper 2023/1012

Arithmetic Sketching

Dan Boneh, Stanford University

Elette Boyle, Massachusetts Institute of Technology

Henry Corrigan-Gibbs, Massachusetts Institute of Technology

Niv Gilboa, Ben-Gurion University of the Negev

Yuval Ishai, Technion – Israel Institute of Technology

Abstract

This paper introduces arithmetic sketching, an abstraction of a primitive that several previous works use to achieve lightweight, low-communication zero-knowledge verification of secret-shared vectors. An arithmetic sketching scheme for a language consists of (1) a randomized linear function compressing a long input x to a short “sketch,” and (2) a small arithmetic circuit that accepts the sketch if and only if , up to some small error. If the language has an arithmetic sketching scheme with short sketches, then it is possible to test membership in using an arithmetic circuit with few multiplication gates. Since multiplications are the dominant cost in protocols for computation on secret-shared, encrypted, and committed data, arithmetic sketching schemes give rise to lightweight protocols in each of these settings. Beyond the formalization of arithmetic sketching, our contributions are: – A general framework for constructing arithmetic sketching schemes from algebraic varieties. This framework unifies schemes from prior work and gives rise to schemes for useful new languages and with improved soundness error. – The first arithmetic sketching schemes for languages of sparse vectors: vectors with bounded Hamming weight, bounded norm, and vectors whose few non-zero values satisfy a given predicate. – A method for “compiling” any arithmetic sketching scheme for a language into a low-communication malicious-secure multi-server protocol for securely testing that a client-provided secret-shared vector is in . We also prove the first nontrivial lower bounds showing limits on the sketch size for certain languages (e.g., vectors of Hamming-weight one) and proving the non-existence of arithmetic sketching schemes for others (e.g., the language of all vectors that contain a specific value).

Note: This version includes additional related work and a few minor edits.

Metadata

Available format(s): PDF
Category: Cryptographic protocols
Publication info: A major revision of an IACR publication in CRYPTO 2023
Keywords: secret sharing multi-party computation sketching
Contact author(s): dabo @ cs stanford edu
eboyle @ alum mit edu
henrycg @ csail mit edu
gilboan @ bgu ac il
yuvali @ cs technion ac il
History: 2023-07-24: revised; 2023-06-29: received; See all versions
Short URL: https://ia.cr/2023/1012
License: CC BY-NC-SA

BibTeX

@misc{cryptoeprint:2023/1012,
      author = {Dan Boneh and Elette Boyle and Henry Corrigan-Gibbs and Niv Gilboa and Yuval Ishai},
      title = {Arithmetic Sketching},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/1012},
      year = {2023},
      url = {https://eprint.iacr.org/2023/1012}
}