CryptoDB
Succinct Functional Commitment for a Large Class of Arithmetic Circuits
| Authors: | |
|---|---|
| Download: | |
| Presentation: | Slides |
| Abstract: | A succinct functional commitment (SFC) scheme for a circuit class $\mathbf{CC}$ enables, for any circuit $\mathcal{C}\in \mathbf{CC}$, the committer to first succinctly commit to a vector $\vec{\alpha}$, and later succinctly open the commitment to $\mathcal{C} (\vec{\alpha}, \vec{\beta})$, where the verifier chooses $\vec{\beta}$ at the time of opening. Unfortunately, SFC commitment schemes are known only for severely limited function classes like the class of inner products. By making non-black-box use of SNARK-construction techniques, we propose a SFC scheme for the large class of semi-sparse polynomials. The new SFC scheme can be used to, say, efficiently (1) implement sparse polynomials, and (2) aggregate various interesting SFC (e.g., vector commitment and polynomial commitment) schemes. The new scheme is evaluation-binding under a new instantiation of the computational uber-assumption. We provide a thorough analysis of the new assumption. |
Video from ASIACRYPT 2020
BibTeX
@article{asiacrypt-2020-30689,
title={Succinct Functional Commitment for a Large Class of Arithmetic Circuits},
booktitle={Advances in Cryptology - ASIACRYPT 2020},
publisher={Springer},
doi={10.1007/978-3-030-64840-4_23},
author={Helger Lipmaa and Kateryna Pavlyk},
year=2020
}