Abstract:We present constant-round concurrently knowledge-extractable black-box resettable zero-knowledge (rZK-CKE) arguments forNP in the bare public-key (BPK) model. We give minimal (sub-exponential) hardness assumption based protocols as well as round-optimal protocols (still under general hardness assumptions). To our knowledge, our protocols are the first ZK protocols that provably provide both resettable/concurrent prover security and concurrent verifier security in public-key models. Here, the notion of concurrent knowledge-extractability roughly means that no malicious polynomial-time prover can convince an honest verifier of any (whether false or true) statement without “knowing” a corresponding NP-witness even by concurrently interleaving interactions in public-key models when verifiers register public-keys. We show that concurrent knowledge-extractability is strictly stronger than “concurrent soundness” (under any sub-exponentially strong one-way permutation) for concurrently proving NP statements to honest verifiers with public-keys. In particular, we show that previous concurrent zero-knowledge protocols in the BPK model that achieved concurrent soundness security and are also traditional arguments of knowledge actually fail to satisfy this stronger security notion (this is demonstrated by concrete attacks). Our work deepens the understanding of the subtleties of concurrent verifier security in public-key settings, and may serve as building blocks in designing other round-efficient concurrently secure protocols in public-key models that use, in particular, argument of knowledge (AOK) protocols as building blocks. RSA Laboratories and Department of Computer Science, Columbia University, New York, NY, USA. moti@cs.columbia.edu Software School, School of Information Science and Engineering, Fudan University, Shanghai 200433, China.

Delegable Zk-Snarks with Proxies

Simulation extractable SNARKs based on target linearly collision-resistant oracle

Scriptable and composable SNARKs in the trusted hardware model

Split: A Hash-based Memory Optimization Method for Zero-Knowledge Succinct Non-Interactive Argument of Knowledge (zk-SNARK)

Collaborative CP-NIZKs: Modular, Composable Proofs for Distributed Secrets

Practical zero-knowledge arguments from ∑-protocols

SoK: What don't we know? Understanding Security Vulnerabilities in SNARKs

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

Generic and Practical Resettable Zero-Knowledge in the Bare Public-Key Model

Unbounded Non-Malleable Non-Interactive Zero Knowledge Protocols for NP

Practical Zero-Knowledge Arguments from Σ-Protocols

Benchmarking ZK-Friendly Hash Functions and SNARK Proving Systems for EVM-compatible Blockchains

Towards a zk-SNARK compiler for Wolfram language

Transparent Polynomial Delegation and Its Applications to Zero Knowledge Proof

Concurrently Knowledge-Extractable Resettable-ZK in the Bare Public-Key Model

A More Efficient Computationally Sound Non-Interactive Zero-Knowledge Shuffle Argument

Simulation extractable versions of Groth's zk-SNARK revisited

Unclonable Non-Interactive Zero-Knowledge

VCProof: Constructing Shorter and Faster-to-Verify zkSNARKs with Vector Oracles.

MPC-in-Multi-Heads: A Multi-Prover Zero-Knowledge Proof System (or: How to Jointly Prove Any NP Statements in ZK)