Abstract:A non-interactive zero-knowledge (NIZK) protocol enables a prover to convince a verifier of the truth of a statement without leaking any other information by sending a single message. The main focus of this work is on exploring short pairing-based NIZKs for all languages based on standard assumptions. In this regime, the seminal work of Groth, Ostrovsky, and Sahai (J.ACM'12) (GOS-NIZK) is still considered to be the state-of-the-art. Although fairly efficient, one drawback of GOS-NIZK is that the proof size is multiplicative in the circuit size computing the relation. That is, the proof size grows by , where C is the circuit for the relation and is the security parameter. By now, there have been numerous follow-up works focusing on shortening the proof size of pairing-based NIZKs, however, thus far, all works come at the cost of relying either on a non-standard knowledge-type assumption or a non-static q -type assumption. Specifically, improving the proof size of the original GOS-NIZK under the same standard assumption has remained as an open problem. Our main result is a construction of a pairing-based NIZK for all of whose proof size is additive in | C |, that is, the proof size only grows by , based on the computational Diffie-Hellman assumption over specific pairing-free groups and decisional linear (DLIN) assumption. As by-products of our main result, we also obtain the following two results: (1) We construct a perfectly zero-knowledge NIZK (NIPZK) for relations computable in with proof size where | w | is the witness length based on the DLIN assumption. This is the first pairing-based NIPZK for a non-trivial class of languages whose proof size is independent of | C | based on a standard assumption. (2) We construct a universally composable (UC) NIZK for relations computable in in the erasure-free adaptive setting whose proof size is from the DLIN assumption. This is an improvement over the recent result of Katsumata, Nishimaki, Yamada, and Yamakawa (CRYPTO'19), which gave a similar result based on a non-static q -type assumption. The main building block for all of our NIZKs is a constrained signature scheme with decomposable online-offline efficiency . This is a property which we newly introduce in this paper and construct from the DLIN assumption. We believe this construction is of an independent interest.

Unbounded non-zero inner product encryption

Reinforcing Privacy in Cloud Computing via Adaptively Secure Non-zero Inner Product Encryption and Anonymous Identity-based Revocation in Unbounded Setting

Predicate- and Attribute-Hiding Inner Product Encryption in a Public Key Setting

Efficient Inner Product Encryption With Simulation-Based Security

Inner product encryption from Middle-Product Learning With Errors

Identity-Based Parallel Key-Insulated Encryption with Multiple Long-Term Keys

Efficient Functional Encryption for Inner Product with Simulation-Based Security

CP-IPFE: Ciphertext-Policy Based Inner Product Functional Encryption

Multiparty Non-Interactive Key Exchange and More From Isogenies on Elliptic Curves

Improved Construction for Inner Product Functional Encryption

Compact NIZKs from Standard Assumptions on Bilinear Maps

On Constructing Pairing-Free Identity-Based Encryptions

Deterministic Identity-Based Encryption from Lattices with More Compact Public Parameters.

Anonymous and Adaptively Secure Revocable IBE with Constant Size Public Parameters

SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test

Quantum safe lightweight encryption scheme for secure data sharing in Internet of Nano Things

Full-Resilient Memory-Optimum Multi-Party Non-Interactive Key Exchange

Identity-Concealed Authenticated Encryption and Key Exchange

New Fully Secure Hierarchical Identity-Based Encryption with Constant Size Ciphertexts

Multipartite Intrinsic Non-Locality and Device-Independent Conference Key Agreement

Practical Parallel Key-Insulated Encryption with Multiple Helper Keys