Abstract:Traditionally, the definition of zero-knowledge states that an interactive proof of x ∈ L provides zero (additional) knowledge if the view of any polynomial-time verifier can be reconstructed by a polynomialtime simulator. Since this definition only requires that the worst-case running-time of the verifier and simulator are polynomials, zeroknowledge becomes a worst-case notion. In STOC'06, Micali and Pass proposed a new notion of precise zeroknowledge, which captures the idea that the view of any verifier in every interaction can be reconstructed in (almost) the same time (i.e., the view can be "indistinguishably reconstructed"). This is the strongest notion among the known works towards precislization of the definition of zeroknowledge. However, as we know, there are two kinds of resources (i.e. time and space) each algorithm consumes in computation. Although the view of a verifier in the interaction of a precise zero-knowledge protocol can be reconstructed in almost the same time, the simulator may run in very large space while at the same time the verifier only runs in very small space. In this case it is still doubtful to take indifference for the verifier to take part in the interaction or to run the simulator. Thus the notion of precise zero-knowledge may be still insufficient. This shows that precislization of the definition of zero-knowledge needs further investigation. In this paper, we propose a new notion of precise time and space simulatable zero-knowledge (PTSSZK), which captures the idea that the view of any verifier in each interaction can be reconstructed not only in the same time, but also in the same space. We construct the first PTSSZK proofs and arguments with simultaneous linear time and linear space precisions for all languages in NP. Our protocols do not use noticeably more rounds than the known precise zero-knowledge protocols.

Efficient Concurrent n poly (log n ) -Simulatable Argument of Knowledge

Efficient Concurrent Zero Knowledge Arguments for NP in the Bare Public-Key Model

Precise Zero-Knowledge Arguments with Poly-Logarithmic Efficiency

Four-Round Zero-Knowledge Arguments Of Knowledge With Strict Polynomial-Time Simulation From Differing-Input Obfuscation For Circuits

Precise Zero-Knowledge in Concurrent Setting

Efficient Non-Interactive Zero Knowledge Arguments for Set Operations.

Unbounded Non-Malleable Non-Interactive Zero Knowledge Protocols for NP

On Zero-Knowledge With Strict Polynomial-Time Simulation And Extraction From Differing-Input Obfuscation For Circuits

Precise Bounded-Concurrent Zero-Knowledge in Almost Constant Rounds

A More Efficient Computationally Sound Non-Interactive Zero-Knowledge Shuffle Argument

Simplified Design for Concurrent Statistical Zero-Knowledge Arguments

Precise Time and Space Simulatable Zero-Knowledge

On constant-round precise zero-knowledge

Transparent Polynomial Delegation and Its Applications to Zero Knowledge Proof

Restricted-Verifier Precise Bounded-Concurrent Zero-Knowledge

Concurrently Non-malleable Black-Box Zero Knowledge in the Bare Public-Key Model

Precise Bounded-Concurrent Zero-Knowledge Proofs for NP

Efficient Zero-Knowledge Proofs of Knowledge of Double Discrete Logarithm

Efficient Modular NIZK Arguments from Shift and Product

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.