Dual-Mode NIZKs: Possibility and Impossibility Results for Property Transfer
Dual-Mode NIZKs: Possibility and Impossibility Results for Property Transfer
复制标题
DOI：
10.1007/978-3-030-65277-7_38
复制
发表时间：
2020
期刊：
影响因子：
3.8
通讯作者：
Vivek Arte;M. Bellare
中科院分区：
文献类型：
--
作者：
Vivek Arte;M. Bellare
本文提出并研究了双模nizk中的产权转移问题。如果具有P的一个模态允许我们证明另一个模态具有P的计算模拟，仅由于两个模态中CRSs的不可区分性，我们就说性质P（如稳健性，ZK或WI）转移。我们最有趣的发现是否定的；我们通过反例表明，似乎对应用程序最重要的稳健性形式无法转移。从积极的方面来看，我们开发了一个通用框架，使我们能够证明零知识、证人不可区分性、可提取性和较弱形式的健全性确实可以转移。我们的处理以统一的方式涵盖了传统的、指定的验证者和指定的证明者nizk。
This paper formulates, and studies, the problem of property transference in dual-mode NIZKs. We say that a property P (such as soundness, ZK or WI) transfers, if, one of the modes having P allows us to prove that the other mode has the computational analogue of P, as a consequence of nothing but the indistinguishability of the CRSs in the two modes. Our most interesting finding is negative; we show by counter-example that the form of soundness that seems most important for applications fails to transfer. On the positive side, we develop a general framework that allows us to show that zero knowledge, witness indistinguishability, extractability and weaker forms of soundness do transfer. Our treatment covers conventional, designated-verifier and designated-prover NIZKs in a unified way.