Abstract:We introduce a new class of protocols called Proofs of Work or Knowledge PoWorKs. In a PoWorK, a prover can convince a verifier that she has either performed work or that she possesses knowledge of a witness to a public statement without the verifier being able to distinguish which of the two has taken place. We formalize PoWorK in terms of three properties, completeness, f-soundness and indistinguishability where f is a function that determines the tightness of the proof of work aspect and present a construction that transforms 3-move HVZK protocols into 3-move public-coin PoWorKs. To formalize the work aspect in a PoWorKï¾¿protocol we define cryptographic puzzles that adhere to certain uniformity conditions, which may also be of independent interest. We instantiate our puzzles in the random oracle RO model as well as via constructing \"dense\" versions of suitably hard one-way functions. We then showcase PoWorKï¾¿protocols by presenting a number of applications. We first show how non-interactive PoWorKs can be used to reduce spam email by forcing users sending an e-mail to either prove to the mail server they are approved contacts of the recipient or to perform computational work. As opposed to previous approaches that applied proofs of work to this problem, our proposal of using PoWorKs is privacy-preserving as it hides the list of the receiver's approved contacts from the mail server. Our second application, shows how PoWorK can be used to compose cryptocurrencies that are based on proofs of work \"Bitcoin-like\" with cryptocurrencies that are based on knowledge relations these include cryptocurrencies that are based on \"proof of stake\", and others. The resulting PoWorK-based cryptocurrency inherits the robustness properties of the underlying two systems while PoWorK-indistinguishability ensures a uniform population of miners. Finally, we show that PoWorKï¾¿protocols imply straight-line quasi-polynomial simulatable arguments of knowledge and based on our construction we obtain an efficient straight-line concurrent 3-move statistically quasi-polynomial simulatable argument of knowledge.

A Note on (im)possibilities of Obfuscating Programs of Zero-Knowledge Proofs of Knowledge

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

Indistinguishable Proofs of Work or Knowledge.

Obfuscation-Based Non-Black-Box Extraction and Constant-Round Zero-Knowledge Arguments of Knowledge.

Oblivious Transfer from Zero-Knowledge Proofs, or How to Achieve Round-Optimal Quantum Oblivious Transfer and Zero-Knowledge Proofs on Quantum States

Lightweight Zero-Knowledge Proofs for Crypto-Computing Protocols.

The Knowledge Complexity of Interactive Proof Systems

Amortized Complexity of Zero-Knowledge Proofs Revisited: Achieving Linear Soundness Slack

On Zero-Knowledge With Strict Polynomial-Time Simulation And Extraction From Differing-Input Obfuscation For Circuits

Four-Round Zero-Knowledge Arguments Of Knowledge With Strict Polynomial-Time Simulation From Differing-Input Obfuscation For Circuits

On the Relativistic Zero Knowledge Quantum Proofs of Knowledge

On constant-round precise zero-knowledge

Constant-round Adaptive Zero-Knowledge Proofs for NP

Precise Zero-Knowledge Arguments with Poly-Logarithmic Efficiency

Zeromorph: Zero-Knowledge Multilinear-Evaluation Proofs from Homomorphic Univariate Commitments

A Black-Box Approach to Post-Quantum Zero-Knowledge in Constant Rounds

On Quantum Obfuscation

A leakage-resilient zero knowledge proof for lattice problem

Compact Proofs of Partial Knowledge for Overlapping CNF Formulae

Unclonable Non-Interactive Zero-Knowledge

Interactive zero-knowledge with restricted random oracles