Publication

A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols

View document

Bibliographic Details
Summary:Zero-knowledge proofs of knowledge (ZK-PoK) are important building blocks for numerous cryptographic applications. Although ZK-PoK have a high potential impact, their real world deployment is typically hindered by their significant complexity compared to other (non-interactive) crypto primitives. Moreover, their design and implementation are time-consuming and error-prone. We contribute to overcoming these challenges as follows: We present a comprehensive specification language and a compiler for ZK-PoK protocols based on Σ-protocols. The compiler allows the fully automatic translation of an abstract description of a proof goal into an executable implementation. Moreover, the compiler overcomes various restrictions of previous approaches, e.g., it supports the important class of exponentiation homomorphisms with hidden-order co-domain, needed for privacy-preserving applications such as DAA. Finally, our compiler is certifying, in the sense that it automatically produces a formal proof of the soundness of the compiled protocol for a large class of protocols using the Isabelle/HOL theorem prover.
Main Authors:Almeida, José Bacelar
Other Authors:Bangerter, Endre; Barbosa, Manuel; Krenn, Stephan; Sadeghi, Ahmad-Reza; Schneider, Thomas
Subject:Zero-knowledge Protocol compiler Formal verification
Year:2010
Country:Portugal
Document type:conference paper
Access type:open access
Associated institution:Universidade do Minho
Language:English
Origin:RepositóriUM - Universidade do Minho
_version_ 1867439539509788672
author Almeida, José Bacelar
author2 Bangerter, Endre
Barbosa, Manuel
Krenn, Stephan
Sadeghi, Ahmad-Reza
Schneider, Thomas
author2_role author
author
author
author
author
author_facet Almeida, José Bacelar
Bangerter, Endre
Barbosa, Manuel
Krenn, Stephan
Sadeghi, Ahmad-Reza
Schneider, Thomas
author_role author
contributor_name_str_mv RepositóriUM - Universidade do Minho
country_str PT
creators_json_txt [{\"Person.name\":\"Almeida, José Bacelar\"},{\"Person.name\":\"Bangerter, Endre\"},{\"Person.name\":\"Barbosa, Manuel\"},{\"Person.name\":\"Krenn, Stephan\"},{\"Person.name\":\"Sadeghi, Ahmad-Reza\"},{\"Person.name\":\"Schneider, Thomas\"}]
datacite.contributors.contributor.contributorName.fl_str_mv RepositóriUM - Universidade do Minho
datacite.creators.creator.creatorName.fl_str_mv Almeida, José Bacelar
Bangerter, Endre
Barbosa, Manuel
Krenn, Stephan
Sadeghi, Ahmad-Reza
Schneider, Thomas
datacite.date.Accepted.fl_str_mv 2010-01-01T00:00:00Z
datacite.date.available.fl_str_mv 2012-05-18T15:01:42Z
datacite.date.embargoed.fl_str_mv 2012-05-18T15:01:42Z
datacite.rights.fl_str_mv http://purl.org/coar/access_right/c_abf2
datacite.subjects.subject.fl_str_mv Zero-knowledge
Protocol compiler
Formal verification
datacite.titles.title.fl_str_mv A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
dc.contributor.none.fl_str_mv RepositóriUM - Universidade do Minho
dc.creator.none.fl_str_mv Almeida, José Bacelar
Bangerter, Endre
Barbosa, Manuel
Krenn, Stephan
Sadeghi, Ahmad-Reza
Schneider, Thomas
dc.date.Accepted.fl_str_mv 2010-01-01T00:00:00Z
dc.date.available.fl_str_mv 2012-05-18T15:01:42Z
dc.date.embargoed.fl_str_mv 2012-05-18T15:01:42Z
dc.format.none.fl_str_mv application/pdf
dc.identifier.none.fl_str_mv https://hdl.handle.net/1822/19403
dc.language.none.fl_str_mv eng
dc.publisher.none.fl_str_mv Springer Verlag
dc.rights.none.fl_str_mv http://purl.org/coar/access_right/c_abf2
dc.subject.none.fl_str_mv Zero-knowledge
Protocol compiler
Formal verification
dc.title.fl_str_mv A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
dc.type.none.fl_str_mv http://purl.org/coar/resource_type/c_5794
description Zero-knowledge proofs of knowledge (ZK-PoK) are important building blocks for numerous cryptographic applications. Although ZK-PoK have a high potential impact, their real world deployment is typically hindered by their significant complexity compared to other (non-interactive) crypto primitives. Moreover, their design and implementation are time-consuming and error-prone. We contribute to overcoming these challenges as follows: We present a comprehensive specification language and a compiler for ZK-PoK protocols based on Σ-protocols. The compiler allows the fully automatic translation of an abstract description of a proof goal into an executable implementation. Moreover, the compiler overcomes various restrictions of previous approaches, e.g., it supports the important class of exponentiation homomorphisms with hidden-order co-domain, needed for privacy-preserving applications such as DAA. Finally, our compiler is certifying, in the sense that it automatically produces a formal proof of the soundness of the compiled protocol for a large class of protocols using the Isabelle/HOL theorem prover.
dirty 0
eu_rights_str_mv openAccess
format conferencePaper
fulltext.url.fl_str_mv https://repositorium.uminho.pt/bitstreams/c728c6be-60d2-44c3-8392-d85dde8ead1a/download
id rum_4d1b00a9fdfa1cb833283c04e2cad2e1
identifier.url.fl_str_mv https://hdl.handle.net/1822/19403
instacron_str repositorium
institution Universidade do Minho
instname_str Universidade do Minho
language eng
network_acronym_str rum
network_name_str RepositóriUM - Universidade do Minho
oai_identifier_str oai:repositorium.uminho.pt:1822/19403
organization_str_mv urn:organizationAcronym:repositorium
person_str_mv Almeida, José Bacelar
Bangerter, Endre
Barbosa, Manuel
Krenn, Stephan
Sadeghi, Ahmad-Reza
Schneider, Thomas
publishDate 2010
publisher.none.fl_str_mv Springer Verlag
reponame_str RepositóriUM - Universidade do Minho
repository_id_str urn:repositoryAcronym:rum
service_str_mv urn:repositoryAcronym:rum
spelling engSpringer VerlagporZero-knowledge proofs of knowledge (ZK-PoK) are important building blocks for numerous cryptographic applications. Although ZK-PoK have a high potential impact, their real world deployment is typically hindered by their significant complexity compared to other (non-interactive) crypto primitives. Moreover, their design and implementation are time-consuming and error-prone. We contribute to overcoming these challenges as follows: We present a comprehensive specification language and a compiler for ZK-PoK protocols based on Σ-protocols. The compiler allows the fully automatic translation of an abstract description of a proof goal into an executable implementation. Moreover, the compiler overcomes various restrictions of previous approaches, e.g., it supports the important class of exponentiation homomorphisms with hidden-order co-domain, needed for privacy-preserving applications such as DAA. Finally, our compiler is certifying, in the sense that it automatically produces a formal proof of the soundness of the compiled protocol for a large class of protocols using the Isabelle/HOL theorem prover.application/pdfporA certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocolsAlmeida, José BacelarBangerter, EndreBarbosa, ManuelKrenn, StephanSadeghi, Ahmad-RezaSchneider, ThomasHostingInstitutionOrganizationalRepositóriUM - Universidade do Minhoe-mailmailto:repositorium@usdb.uminho.ptrepositorium@usdb.uminho.ptISBNIsPartOf9783642154966ISSNIsPartOf0302-9743DOIIsPartOf10.1007/978-3-642-15497-3_102012-05-18T15:01:42Z20102010-01-01T00:00:00ZHandlehttps://hdl.handle.net/1822/19403http://purl.org/coar/access_right/c_abf2open accessZero-knowledgeProtocol compilerFormal verification367445 bytesother research producthttp://purl.org/coar/resource_type/c_5794conference paperhttp://purl.org/coar/access_right/c_abf2application/pdffulltexthttps://repositorium.uminho.pt/bitstreams/c728c6be-60d2-44c3-8392-d85dde8ead1a/download
spellingShingle A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
Almeida, José Bacelar
Zero-knowledge
Protocol compiler
Formal verification
status SINGLETON
subject.fl_str_mv Zero-knowledge
Protocol compiler
Formal verification
title A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
title_full A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
title_fullStr A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
title_full_unstemmed A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
title_short A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
title_sort A certifying compiler for zero-knowledge proofs of knowledge based on sigma-protocols
topic Zero-knowledge
Protocol compiler
Formal verification
topic_facet Zero-knowledge
Protocol compiler
Formal verification
url https://hdl.handle.net/1822/19403
visible 1