the hunting of the snark - tautromer/slides/snark-20110816-crypto2011.… · charles bouillaguet,...
TRANSCRIPT
The Hunting of the SNARKNir BitanskyRan CanettiAlessandro ChiesaEran Tromer
Succint NoninteractiveArgument of KnowledgeKilian '92Micali '00Aiello Bhatt Ostrovsky Rajagopalan '00Dwork Langberg Naor Nissim Reingold '04Di Crescenzo Lipmaa '08Mie '08Gentry Wichs '11Carroll '76
Verifier generates and publishesa reference string
Prover picks NP statement “exists w such that M(x,w)=1” and sends M,x, and a succint proof
Verifier efficiently checks proof and isconvinced that proverknows a witness w.
SNARK
ECRH
SNARK
ECRH
SNARK
ECRH
SNARK
Knowledge Assumptions
ECRH
SNARK
Knowledge Assumptions
Knowledge of Exponent
ECRH
SNARK
Knowledge Assumptions
Knowledge of ExponentNoisy Multiples
ECRH
SNARK
Knowledge Assumptions
Knowledge of ExponentNoisy Multiples
Noisy Inner Products
ECRH
SNARK
Knowledge Assumptions
Knowledge of ExponentNoisy Multiples
Noisy Inner ProductsKnowledge of Icecream
Knowledge of Icecream Assumption
The method employed I would gladly define, While I have it so clear in my head,If I had but the slides and you had but the time — But much yet remains to be said.http://eprint.iacr.org/2011/443