ECCC-Report TR05-162https://eccc.weizmann.ac.il/report/2005/162Comments and Revisions published for TR05-162en-usFri, 29 Jun 2007 00:00:00 +0300
Revision 1
| Generic yet Practical (Statistical) Zero-Knowledge from Any Public-Coin HVZK |
Yunlei Zhao
https://eccc.weizmann.ac.il/report/2005/162#revision1In comparison with the original version, the results in the updated ver sion are strengthened and extended in the following aspects:
1. The proof of the theorem for showing the round-complexity lower-bound of equivocal commitments is made to be *unconditional*.
2. We clarify the necessity of preimage-verifiable OWF in Damgard's paradigm of constructing perfectly-hiding trapdoor commitments with $\Sigma$-protocols. This implies, to the best of our knowledge, that our round-optimal equivocal commitment scheme is the first constant-round statistically-hiding (*not necessarily to be trapdoor or equivocal*) commitment scheme based on any OWF admitting $\Sigma$-protocols.
3. The implication that $\Sigma$-protocols may witness NP-Completeness (noted in the previous communications) is clarified and observed in a new added Section.
Fri, 29 Jun 2007 00:00:00 +0300https://eccc.weizmann.ac.il/report/2005/162#revision1
Paper TR05-162
| Generic yet Practical ZK Arguments from any Public-Coin HVZK |
Yunlei Zhao,
Jesper Buus Nielsen,
Robert H. Deng,
Feng Dengguo
https://eccc.weizmann.ac.il/report/2005/162In this work, we present a generic yet practical transformation from any public-coin honest-verifier zero-knowledge (HVZK) protocols to normal zero-knowledge (ZK) arguments. By ``generic", we mean that the transformation is applicable to any public-coin HVZK protocol under any one-way function (OWF) admitting Sigma-protocols. By ``practical" we mean that the transformation does not go through general NP-reductions and only incurs additionally one round
(for public-coin HVZK protocols of odd number of rounds that is the normal case in practice). In particular, if the starting public-coin HVZK protocols and the underlying Sigma-protocols are practical, the transformed ZK arguments are also practical. In addition, our transformation also preserves statistical/perfect zero-knowledge.To this end, we develop generic yet practical 3-round perfectly-hiding equivocal (string) commitment scheme under any OWF admitting Sigma-protocols, which is possibly of independent value. We also show that three rounds is the lower-bound of round-complexity for equivocal commitment schemes.
Fri, 23 Dec 2005 19:45:30 +0200https://eccc.weizmann.ac.il/report/2005/162