Unconditionally Secure Computation Against Low-Complexity Leakage

Bogdanov, Andrej; Ishai, Yuval; Srinivasan, Akshayaram

doi:10.1007/978-3-030-26951-7_14

Cited by 12 publications

(1 citation statement)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To eliminate this trust assumption, we instead have these encodings provided as part of the input, and check their validity to achieve the SAT-respecting property. Second, we note that the LRCC of [ 18 ] does posses the property that

is satisfiable only if C is, but this LRCC only resists

leakage [ 45 ], a leakage class which does not seem sufficiently strong to contain the function one needs to apply to an

-witness to obtain a PCP.…”

Section: The Zk-pcps Of Ishai Et Al: Zk From Lr Circuitsmentioning

confidence: 99%

Shielding Probabilistically Checkable Proofs: Zero-Knowledge PCPs from Leakage Resilience

Weiss

2022

Entropy

View full text Add to dashboard Cite

Probabilistically Checkable Proofs (PCPs) allows a randomized verifier, with oracle access to a purported proof, to probabilistically verify an input statement of the form “x∈L” by querying only a few proof bits. Zero-Knowledge PCPs (ZK-PCPs) enhance standard PCPs to additionally guarantee that the view of any (possibly malicious) verifier querying a bounded number of proof bits can be efficiently simulated up to a small statistical distance. The first ZK-PCP construction of Kilian, Petrank and Tardos (STOC 1997), and following constructions employing similar techniques, necessitate that the honest verifier makes several rounds of queries to the proof. This undesirable property, which is inherent to their technique, translates into increased round complexity in cryptographic applications of ZK-PCPs. We survey two recent ZK-PCP constructions—due to Ishai, Yang and Weiss (TCC 2016-A), and Hazay, Venkitasubramaniam and Weiss (ITC 2021)—in which the honest verifier makes a single round of queries to the proof. Both constructions use entirely different techniques compared to previous ZK-PCP constructions, by showing connections to the seemingly-unrelated notion of leakage resilience. These constructions are incomparable to previous ZK-PCP constructions: while on the one hand the honest verifier only makes a single round of queries to the proof, these ZK-PCPs either obtain a smaller (polynomial) ratio between the query complexity of the honest and malicious verifiers or obtain a weaker ZK guarantee in which the ZK simulator is not necessarily efficient.

show abstract

is satisfiable only if C is, but this LRCC only resists

leakage [ 45 ], a leakage class which does not seem sufficiently strong to contain the function one needs to apply to an

-witness to obtain a PCP.…”

Section: The Zk-pcps Of Ishai Et Al: Zk From Lr Circuitsmentioning

confidence: 99%