Delegable zk-SNARKs with proxies  

作　　者：Jinrui SHA Shengli LIU 

机构地区：[1]School of Cyber Science and Engineering,Shanghai Jiao Tong University,Shanghai 200240,China [2]State Key Laboratory of Cryptology,Beijing 100878,China [3]Department of Computer Science and Engineering,Shanghai Jiao Tong University,Shanghai 200240,China

出　　处：《Frontiers of Computer Science》2024年第5期201-217,共17页计算机科学前沿（英文版）

基　　金：Shengli Liu and Jinrui Sha were partially sponsored by the National Key R&D Program of China(No.2022YFB2701503);the National Natural Science Foundation of China(Grant No.61925207);Guangdong Major Project of Basic and Applied Basic Research(No.2019B030302008).

摘　　要：In this paper,we propose the concept of delegable zero knowledge succinct non-interactive arguments of knowledge(zk-SNARKs).The delegable zk-SNARKKis parameterized by(u,k,k',k").The delegable property of zk-SNARKs allows the prover to delegate its proving ability toμproxies.Any k honest proxies are able to generate the correct proof for a statement,but the collusion of less than k proxies does not obtain information about the witness of the statement.We also define k'-soundness and k"-zero knowledge by taking into consider of multi-proxies.We propose a construction of(μ,2t+1,t,t)-delegable zk-SNARK for the NPC language of arithmetic circuit satisfiability.Our delegable zk-SNARK stems from Groth's zk-SNARK scheme(Groth16).We take advantage of the additive and multiplicative properties of polynomial-based secret sharing schemes to achieve delegation for zk-SNARK.Our secret sharing scheme works well with the pairing groups so that the nice succinct properties of Groth's zk-SNARK scheme are preserved,while augmenting the delegable property and keeping soundness and zero-knowledge in the scenario of multi-proxies.

关 键 词：szk-SNARKs secret sharing DELEGATION bilinear groups 

分 类 号：TN918.4[电子电信—通信与信息系统]