Linear Algebra with Sub-linear Zero-Knowledge Arguments

  • Jens Groth
Conference paper

DOI: 10.1007/978-3-642-03356-8_12

Part of the Lecture Notes in Computer Science book series (LNCS, volume 5677)
Cite this paper as:
Groth J. (2009) Linear Algebra with Sub-linear Zero-Knowledge Arguments. In: Halevi S. (eds) Advances in Cryptology - CRYPTO 2009. Lecture Notes in Computer Science, vol 5677. Springer, Berlin, Heidelberg

Abstract

We suggest practical sub-linear size zero-knowledge arguments for statements involving linear algebra. Given commitments to matrices over a finite field, we give a sub-linear size zero-knowledge argument that one committed matrix is the product of two other committed matrices. We also offer a sub-linear size zero-knowledge argument for a committed matrix being equal to the Hadamard product of two other committed matrices. Armed with these tools we can give many other sub-linear size zero-knowledge arguments, for instance for a committed matrix being upper or lower triangular, a committed matrix being the inverse of another committed matrix, or a committed matrix being a permutation of another committed matrix.

A special case of what can be proved using our techniques is the satisfiability of an arithmetic circuit with N gates. Our arithmetic circuit zero-knowledge argument has a communication complexity of \(O(\sqrt{N})\) group elements. We give both a constant round variant and an O(logN) round variant of our zero-knowledge argument; the latter has a computation complexity of O(N/logN) exponentiations for the prover and O(N) multiplications for the verifier making it efficient for the prover and very efficient for the verifier. In the case of a binary circuit consisting of NAND-gates we give a zero-knowledge argument of circuit satisfiability with a communication complexity of \(O(\sqrt{N})\) group elements and a computation complexity of O(N) multiplications for both the prover and the verifier.

Keywords

Sub-linear size zero-knowledge arguments public-coin special honest verifier zero-knowledge Pedersen commitments linear algebra circuit satisfiability 
Download to read the full conference paper text

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Jens Groth
    • 1
  1. 1.University College LondonUK

Personalised recommendations