NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness

Prabhanjan Ananth; Gilad Asharov; Vipul Goyal; Hadar Kaner; Pratik Soni; Brent Waters

doi:10.1007/978-3-031-71070-4_1

NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness

Prabhanjan Ananth, Gilad Asharov, Vipul Goyal, Hadar Kaner, Pratik Soni, Brent Waters

Department of Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Trusted setup is commonly used for non-interactive proof and argument systems. However, there is no guarantee that the setup parameters in these systems are generated in a trustworthy manner. Building upon previous works, we conduct a systematic study of non-interactive zero-knowledge arguments in the common reference string model where the authority running the trusted setup might be corrupted. We explore both zero-knowledge and soundness properties in this setting. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors.We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness.Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors. We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness. Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS.

Original language	English
Title of host publication	Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings
Editors	Clemente Galdi, Duong Hieu Phan
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	3-23
Number of pages	21
ISBN (Print)	9783031710698
DOIs	https://doi.org/10.1007/978-3-031-71070-4_1
State	Published - 2024
Event	14th Conference on Security and Cryptography for Networks, SCN 2024 - Amalfi, Italy Duration: 11 Sep 2024 → 13 Sep 2024

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	14973 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	14th Conference on Security and Cryptography for Networks, SCN 2024
Country/Territory	Italy
City	Amalfi
Period	11/09/24 → 13/09/24

Bibliographical note

Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Switzerland AG 2024.

Keywords

accountability
non-interactive zero-knowledge
subversion security

Access to Document

10.1007/978-3-031-71070-4_1

Cite this

Ananth, P., Asharov, G., Goyal, V., Kaner, H., Soni, P., & Waters, B. (2024). NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness. In C. Galdi, & D. H. Phan (Eds.), Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings (pp. 3-23). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 14973 LNCS). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-71070-4_1

Ananth, Prabhanjan ; Asharov, Gilad ; Goyal, Vipul et al. / NIZKs with Maliciously Chosen CRS : Subversion Advice-ZK and Accountable Soundness. Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings. editor / Clemente Galdi ; Duong Hieu Phan. Springer Science and Business Media Deutschland GmbH, 2024. pp. 3-23 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{fb02a7405a384c699bca9ea451a37611,

title = "NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness",

abstract = "Trusted setup is commonly used for non-interactive proof and argument systems. However, there is no guarantee that the setup parameters in these systems are generated in a trustworthy manner. Building upon previous works, we conduct a systematic study of non-interactive zero-knowledge arguments in the common reference string model where the authority running the trusted setup might be corrupted. We explore both zero-knowledge and soundness properties in this setting. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT{\textquoteright}21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors.We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness.Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT{\textquoteright}21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors. We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness. Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS.",

keywords = "accountability, non-interactive zero-knowledge, subversion security",

author = "Prabhanjan Ananth and Gilad Asharov and Vipul Goyal and Hadar Kaner and Pratik Soni and Brent Waters",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2024.; 14th Conference on Security and Cryptography for Networks, SCN 2024 ; Conference date: 11-09-2024 Through 13-09-2024",

year = "2024",

doi = "10.1007/978-3-031-71070-4_1",

language = "אנגלית",

isbn = "9783031710698",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "3--23",

editor = "Clemente Galdi and Phan, {Duong Hieu}",

booktitle = "Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings",

address = "גרמניה",

}

Ananth, P, Asharov, G, Goyal, V, Kaner, H, Soni, P & Waters, B 2024, NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness. in C Galdi & DH Phan (eds), Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 14973 LNCS, Springer Science and Business Media Deutschland GmbH, pp. 3-23, 14th Conference on Security and Cryptography for Networks, SCN 2024, Amalfi, Italy, 11/09/24. https://doi.org/10.1007/978-3-031-71070-4_1

NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness. / Ananth, Prabhanjan; Asharov, Gilad; Goyal, Vipul et al.
Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings. ed. / Clemente Galdi; Duong Hieu Phan. Springer Science and Business Media Deutschland GmbH, 2024. p. 3-23 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 14973 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - NIZKs with Maliciously Chosen CRS

T2 - 14th Conference on Security and Cryptography for Networks, SCN 2024

AU - Ananth, Prabhanjan

AU - Asharov, Gilad

AU - Goyal, Vipul

AU - Kaner, Hadar

AU - Soni, Pratik

AU - Waters, Brent

PY - 2024

Y1 - 2024

N2 - Trusted setup is commonly used for non-interactive proof and argument systems. However, there is no guarantee that the setup parameters in these systems are generated in a trustworthy manner. Building upon previous works, we conduct a systematic study of non-interactive zero-knowledge arguments in the common reference string model where the authority running the trusted setup might be corrupted. We explore both zero-knowledge and soundness properties in this setting. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors.We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness.Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors. We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness. Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS.

AB - Trusted setup is commonly used for non-interactive proof and argument systems. However, there is no guarantee that the setup parameters in these systems are generated in a trustworthy manner. Building upon previous works, we conduct a systematic study of non-interactive zero-knowledge arguments in the common reference string model where the authority running the trusted setup might be corrupted. We explore both zero-knowledge and soundness properties in this setting. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors.We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness.Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS. We consider a new notion of NIZK called subversion advice-ZK NIZK that strengthens the notion of zero-knowledge with malicious authority security considered by Ananth, Asharov, Dahari and Goyal (EUROCRYPT’21), and present a construction of a subversion advice-ZK NIZK from the sub-exponential hardness of learning with errors. We introduce a new notion that strengthens the traditional definition of soundness, called accountable soundness, and present generic compilers that lift any NIZK for interesting languages in NP to additionally achieve accountable soundness. Finally, we combine our results for both subversion advice-ZK and accountable soundness to achieve a subversion advice-ZK NIZK that also satisfies accountable soundness. This results in the first NIZK construction that satisfies meaningful notions of both soundness and zero-knowledge even for maliciously chosen CRS.

KW - accountability

KW - non-interactive zero-knowledge

KW - subversion security

UR - http://www.scopus.com/inward/record.url?scp=85204567104&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-71070-4_1

DO - 10.1007/978-3-031-71070-4_1

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:85204567104

SN - 9783031710698

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 3

EP - 23

BT - Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings

A2 - Galdi, Clemente

A2 - Phan, Duong Hieu

PB - Springer Science and Business Media Deutschland GmbH

Y2 - 11 September 2024 through 13 September 2024

ER -

Ananth P, Asharov G, Goyal V, Kaner H, Soni P, Waters B. NIZKs with Maliciously Chosen CRS: Subversion Advice-ZK and Accountable Soundness. In Galdi C, Phan DH, editors, Security and Cryptography for Networks - 14th International Conference, SCN 2024, Proceedings. Springer Science and Business Media Deutschland GmbH. 2024. p. 3-23. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-031-71070-4_1