Marlin: Preprocessing zkSNARKs with Universal and Updatable SRS

被引:201
作者
Chiesa, Alessandro [1 ]
Hu, Yuncong [1 ]
Maller, Mary [2 ]
Mishra, Pratyush [1 ]
Vesely, Noah [1 ]
Ward, Nicholas [1 ]
机构
[1] Univ Calif Berkeley, Berkeley, CA 94704 USA
[2] Ethereum Fdn, London, England
来源
ADVANCES IN CRYPTOLOGY - EUROCRYPT 2020, PT I | 2020年 / 12105卷
基金
英国工程与自然科学研究理事会;
关键词
ZERO-KNOWLEDGE;
D O I
10.1007/978-3-030-45721-1_26
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
We present a methodology to construct preprocessing zkSNARKs where the structured reference string (SRS) is universal and updatable. This exploits a novel use of holography [Babai et al., STOC 1991], where fast verification is achieved provided the statement being checked is given in encoded form. We use our methodology to obtain a preprocessing zkSNARK where the SRS has linear size and arguments have constant size. Our construction improves on Sonic [Maller et al., CCS 2019], the prior state of the art in this setting, in all efficiency parameters: proving is an order of magnitude faster and verification is thrice as fast, even with smaller SRS size and argument size. Our construction is most efficient when instantiated in the algebraic group model (also used by Sonic), but we also demonstrate how to realize it under concrete knowledge assumptions. We implement and evaluate our construction. The core of our preprocessing zkSNARK is an efficient algebraic holographic proof (AHP) for rank-1 constraint satisfiability (R1CS) that achieves linear proof length and constant query complexity.
引用
收藏
页码:738 / 768
页数:31
相关论文
共 42 条
[1]  
Ames S., 2017, CCS 2017
[2]  
[Anonymous], 2017, J HEALTHCARE ENG
[3]  
Babai L., 1991, STOC 1991
[4]  
Bayer S, 2012, LECT NOTES COMPUT SC, V7237, P263, DOI 10.1007/978-3-642-29011-4_17
[5]  
Ben-Sasson E., 2014, USENIX SECURITY 2014
[6]  
Ben-Sasson E., 2015, S P 2015
[7]   Short PCPS with polylog query complexity [J].
Ben-Sasson, Eli ;
Sudan, Madhu .
SIAM JOURNAL ON COMPUTING, 2008, 38 (02) :551-607
[8]   Linear-Size Constant-Query IOPs for Delegating Computation [J].
Ben-Sasson, Eli ;
Chiesa, Alessandro ;
Goldberg, Lior ;
Gur, Tom ;
Riabzev, Michael ;
Spooner, Nicholas .
THEORY OF CRYPTOGRAPHY, TCC 2019, PT II, 2019, 11892 :494-521
[9]   Scalable Zero Knowledge with No Trusted Setup [J].
Ben-Sasson, Eli ;
Bentov, Iddo ;
Horesh, Yinon ;
Riabzev, Michael .
ADVANCES IN CRYPTOLOGY - CRYPTO 2019, PT III, 2019, 11694 :701-732
[10]   Aurora: Transparent Succinct Arguments for R1CS [J].
Ben-Sasson, Eli ;
Chiesa, Alessandro ;
Riabzev, Michael ;
Spooner, Nicholas ;
Virza, Madars ;
Ward, Nicholas P. .
ADVANCES IN CRYPTOLOGY - EUROCRYPT 2019, PT I, 2019, 11476 :103-128