Results 1  10
of
445,362
How to Construct ConstantRound ZeroKnowledge Proof Systems for NP
 Journal of Cryptology
, 1995
"... Constantround zeroknowledge proof systems for every language in NP are presented, assuming the existence of a collection of clawfree functions. In particular, it follows that such proof systems exist assuming the intractability of either the Discrete Logarithm Problem or the Factoring Problem for ..."
Abstract

Cited by 169 (8 self)
 Add to MetaCart
Constantround zeroknowledge proof systems for every language in NP are presented, assuming the existence of a collection of clawfree functions. In particular, it follows that such proof systems exist assuming the intractability of either the Discrete Logarithm Problem or the Factoring Problem
A Note on ConstantRound ZeroKnowledge Proofs for NP
 In Proceedings of the 1st Theory of Cryptography Conference
, 2004
"... We consider the problem of constructing a constantround zeroknowledge proof system for all languages in NP. This problem has been previously addressed by Goldreich and Kahan (Jour. of Cryptology, 1996). Following recent works on concurrent zeroknowledge, we propose an alternative solution tha ..."
Abstract

Cited by 14 (0 self)
 Add to MetaCart
We consider the problem of constructing a constantround zeroknowledge proof system for all languages in NP. This problem has been previously addressed by Goldreich and Kahan (Jour. of Cryptology, 1996). Following recent works on concurrent zeroknowledge, we propose an alternative solution
On ConstantRound Concurrent ZeroKnowledge
"... Abstract. Loosely speaking, an interactive proof is said to be zeroknowledge if the view of every “efficient ” verifier can be “efficiently” simulated. An outstanding open question regarding zeroknowledge is whether constantround concurrent zeroknowledge proofs exists for nontrivial languages. We ..."
Abstract

Cited by 13 (7 self)
 Add to MetaCart
Abstract. Loosely speaking, an interactive proof is said to be zeroknowledge if the view of every “efficient ” verifier can be “efficiently” simulated. An outstanding open question regarding zeroknowledge is whether constantround concurrent zeroknowledge proofs exists for nontrivial languages
Inaccessible Entropy
"... We put forth a new computational notion of entropy, which measures the (in)feasibility of sampling high entropy strings that are consistent with a given protocol. Specifically, we say that the i’th round of a protocol (A, B) has accessible entropy at most k, if no polynomialtime strategy A ∗ can ge ..."
Abstract

Cited by 15 (7 self)
 Add to MetaCart
that constantround statistically hiding commitments are necessary for constructing constantround zeroknowledge proof systems for NP that remain secure under parallel composition (assuming the existence of oneway functions). Categories and Subject Descriptors: F.0 [Theory of Computation]: General.
ConstantRound Concurrent Zeroknowledge from
, 2014
"... We present a constantround concurrent zeroknowledge protocol for NP. Our protocol relies on the existence of families of collisionresistant hash functions, oneway permutations, and indistinguishability obfuscators for P/poly (with slightly superpolynomial security). ..."
Abstract
 Add to MetaCart
We present a constantround concurrent zeroknowledge protocol for NP. Our protocol relies on the existence of families of collisionresistant hash functions, oneway permutations, and indistinguishability obfuscators for P/poly (with slightly superpolynomial security).
A Note on ConstantRound ZeroKnowledge Proofs of Knowledge ∗
, 2011
"... In this note, we show the existence of constantround computational zeroknowledge proofs of knowledge for all N P. The existence of constantround zeroknowledge proofs was proven by Goldreich and Kahan (Journal of Cryptology, 1996), and the existence of constantround zeroknowledge arguments of kn ..."
Abstract

Cited by 3 (0 self)
 Add to MetaCart
In this note, we show the existence of constantround computational zeroknowledge proofs of knowledge for all N P. The existence of constantround zeroknowledge proofs was proven by Goldreich and Kahan (Journal of Cryptology, 1996), and the existence of constantround zeroknowledge arguments
On the Composition of ZeroKnowledge Proof Systems
 SIAM Journal on Computing
, 1990
"... : The wide applicability of zeroknowledge interactive proofs comes from the possibility of using these proofs as subroutines in cryptographic protocols. A basic question concerning this use is whether the (sequential and/or parallel) composition of zeroknowledge protocols is zeroknowledge too. We ..."
Abstract

Cited by 214 (15 self)
 Add to MetaCart
execution. We present lower bounds on the round complexity of zeroknowledge proofs, with significant implications to the parallelization of zeroknowledge protocols. We prove that 3round interactive proofs and constantround ArthurMerlin proofs that are blackbox simulation zeroknowledge exist only
ConstantRound Perfect ZeroKnowledge Computationally Convincing Protocols
, 1991
"... A perfect zeroknowledge interactive protocol allows a prover to convince a verifier of the validity of a statement in a way that does not give the verifier any additional information [GMR,GMW]. Such protocols take place by the exchange of messages back and forth between the prover and the verifier. ..."
Abstract

Cited by 47 (5 self)
 Add to MetaCart
cheating greater than 2 \Gammak . In this paper, we give the first perfect zeroknowledge protocol that offers arbitrarily high security for any statement in NP with a constant number of rounds. The protocol is computationally convincing (rather than statistically convincing as would have been
ConstantRound LeakageResilient ZeroKnowledge Arguments of Knowledge for NP
"... Abstract. Garg, Jain, and Sahai first consider zero knowledge proofs in the presence of leakage on the local state of the prover, and present a leakageresilientzeroknowledge proof system for HC (Hamiltonian Cycle) problem. Their construction is called (1 + ε)leakageresilient zeroknowledge, for ..."
Abstract
 Add to MetaCart
, for any constant ε> 0, because the total length of the leakage the simulator needs is (1 + ε) times as large as that of the leakage received by the verifier. In recent, Pandey provides a constantround leakageresilient zeroknowledge argument satisfying the ideal requirement of ε = 0. Whether
On ConstantRound Concurrent ZeroKnowledge from a Knowledge Assumption
, 2012
"... In this work, we consider the longstanding open question of constructing constantround concurrent zeroknowledge protocols in the plain model. Resolving this question is known to require nonblackbox techniques. We consider nonblackbox techniques for zeroknowledge based on knowledge assumption ..."
Abstract

Cited by 2 (0 self)
 Add to MetaCart
In this work, we consider the longstanding open question of constructing constantround concurrent zeroknowledge protocols in the plain model. Resolving this question is known to require nonblackbox techniques. We consider nonblackbox techniques for zeroknowledge based on knowledge
Results 1  10
of
445,362