Orion: Zero knowledge proof with linear prover time

T **e, Y Zhang, D Song - Annual International Cryptology Conference, 2022‏ - Springer
Zero-knowledge proof is a powerful cryptographic primitive that has found various
applications in the real world. However, existing schemes with succinct proof size suffer from …

Fiat-shamir transformation of multi-round interactive proofs

T Attema, S Fehr, M Klooß - Theory of Cryptography Conference, 2022‏ - Springer
Abstract The celebrated Fiat-Shamir transformation turns any public-coin interactive proof
into a non-interactive one, which inherits the main security properties (in the random oracle …

Mangrove: A scalable framework for folding-based SNARKs

W Nguyen, T Datta, B Chen, N Tyagi… - Annual International …, 2024‏ - Springer
We present a framework for building efficient folding-based SNARKs. First we develop a
new “uniformizing” compiler for NP statements that converts any poly-time computation to a …

A Compressed -Protocol Theory for Lattices

T Attema, R Cramer, L Kohl - Annual International Cryptology Conference, 2021‏ - Springer
We show a lattice-based solution for commit-and-prove transparent circuit zero-knowledge
(ZK) with polylog-communication, the first not depending on PCPs. We start from …

Proofs, arguments, and zero-knowledge

J Thaler - Foundations and Trends® in Privacy and Security, 2022‏ - nowpublishers.com
Interactive proofs (IPs) and arguments are cryptographic protocols that enable an untrusted
prover to provide a guarantee that it performed a requested computation correctly …

LaBRADOR: compact proofs for R1CS from module-SIS

W Beullens, G Seiler - Annual International Cryptology Conference, 2023‏ - Springer
The most compact quantum-safe proof systems for large circuits are PCP-type systems such
as Ligero, Aurora, and Shockwave, that only use weak cryptographic assumptions, namely …

DualRing: Generic Construction of Ring Signatures with Efficient Instantiations

TH Yuen, MF Esgin, JK Liu, MH Au, Z Ding - Annual International …, 2021‏ - Springer
We introduce a novel generic ring signature construction, called DualRing, which can be
built from several canonical identification schemes (such as Schnorr identification) …

Lattice-based succinct arguments from vanishing polynomials

V Cini, RWF Lai, G Malavolta - Annual International Cryptology …, 2023‏ - Springer
Succinct arguments allow a prover to convince a verifier of the validity of any statement in a
language, with minimal communication and verifier's work. Among other approaches, lattice …

Rofl: Robustness of secure federated learning

H Lycklama, L Burkhalter, A Viand… - … IEEE Symposium on …, 2023‏ - ieeexplore.ieee.org
Even though recent years have seen many attacks exposing severe vulnerabilities in
Federated Learning (FL), a holistic understanding of what enables these attacks and how …

Brakedown: Linear-time and field-agnostic SNARKs for R1CS

A Golovnev, J Lee, S Setty, J Thaler… - Annual International …, 2023‏ - Springer
This paper introduces a SNARK called Brakedown. Brakedown targets R1CS, a popular NP-
complete problem that generalizes circuit-satisfiability. It is the first built system that provides …