Fully-succinct Publicly Verifiable Delegation from Constant-Size Assumptions - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2021

Fully-succinct Publicly Verifiable Delegation from Constant-Size Assumptions

Alonso González
  • Function : Author
  • PersonId : 1116169
Alexandros Zacharakis
  • Function : Author
  • PersonId : 1116170


We construct a publicly verifiable, non-interactive delegation scheme for any polynomial size arithmetic circuit with proof-size and verification complexity comparable to those of pairing based zk-SNARKS. Concretely, the proof consists of O(1) group elements and verification requires O(1) pairings and n group exponentiations, where n is the size of the input. While known SNARK-based constructions rely on non-falsifiable assumptions, our construction can be proven sound under any constant size (k ≥ 2) k-Matrix Diffie-Hellman (k-MDDH) assumption. However, the size of the reference string as well as the prover's complexity are quadratic in the size of the circuit. This result demonstrates that we can construct delegation from very simple and well-understood assumptions. We consider this work a first step towards achieving practical delegation from standard, falsifiable assumptions.Our main technical contributions are first, the introduction and construction of what we call "no-signaling, somewhere statistically binding commitment schemes". These commitments are extractable for any small part of an opening , where S⊆ [n] is of size at most K. Here n is the dimension of x and x_S= (x_i)_{i ∈ S}. Importantly, for any S' ⊆ S , extracting x_S′ can be done independently of S\S ′. Second, we use these commitments to construct more efficient "quasi-arguments" with no-signaling extraction, introduced by Paneth and Rothblum (TCC 17). These arguments allow extracting parts of the witness of a statement and checking it against some local constraints without revealing which part is checked. We construct pairing-based quasi arguments for linear and quadratic constraints and combine them with the low-depth delegation result of González et. al. (Asiacrypt 19) to construct the final delegation scheme.
Fichier principal
Vignette du fichier
2021-353.pdf (463.67 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03419735 , version 1 (08-11-2021)



Alonso González, Alexandros Zacharakis. Fully-succinct Publicly Verifiable Delegation from Constant-Size Assumptions. TCC 2021 - 19th International Conference Theory of Cryptography, Nov 2021, Raleigh, United States. pp.1-79, ⟨10.1007/978-3-030-90459-3_18⟩. ⟨hal-03419735⟩
35 View
76 Download



Gmail Facebook X LinkedIn More