arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2301.02161cs.CCcs.DS
收藏

流式零知识证明

Streaming Zero-Knowledge Proofs

Graham Cormode, Marcel Dall'Agnol, Tom Gur, Chris Hickey

AI总结:

本研究首次提出流式零知识证明,为数据流交互证明中的求和检查与多项式求值协议赋予零知识属性,并推广至索引、中位数等核心流式问题,验证者空间复杂度为polylog(n),其余参数为n^{o(1)}。

摘要:

流式交互证明(SIPs)使得一个空间受限的算法能够通过一次性访问海量数据流,与一个强大但不可信证明者通信,来验证需要大空间的计算。这项工作开创了数据流零知识证明的研究。我们定义了流式环境中的零知识概念,并为流式交互证明文献中的两个主要算法构建模块——求和检查与多项式求值协议——构造了零知识SIPs。据我们所知,所有已知的流式交互证明均基于这两种工具之一,因此,这使我们能够为诸如索引、点查询和范围查询、中位数、频率矩以及内积等核心流式问题获得零知识SIPs。我们的协议在时间、空间以及通信方面均高效:验证者算法的空间复杂度为$\mathrm{polylog}(n)$,并且在经过使用近线性长度随机串的非交互式设置后,其余参数均为$n^{o(1)}$。在此过程中,我们开发了一个用于设计零知识数据流协议的算法工具包,包括一个代数流式承诺协议和一个时间承诺协议。我们的分析依赖于精细的代数与信息论论证,以及从平均情况通信复杂度进行的归约。

英文摘要:

Streaming interactive proofs (SIPs) enable a space-bounded algorithm with one-pass access to a massive stream of data to verify a computation that requires large space, by communicating with a powerful but untrusted prover. This work initiates the study of zero-knowledge proofs for data streams. We define the notion of zero-knowledge in the streaming setting and construct zero-knowledge SIPs for the two main algorithmic building blocks in the streaming interactive proofs literature: the sumcheck and polynomial evaluation protocols. To the best of our knowledge all known streaming interactive proofs are based on either of these tools, and indeed, this allows us to obtain zero-knowledge SIPs for central streaming problems such as index, point and range queries, median, frequency moments, and inner product. Our protocols are efficient in terms of time and space, as well as communication: the verifier algorithm's space complexity is $\mathrm{polylog}(n)$ and, after a non-interactive setup that uses a random string of near-linear length, the remaining parameters are $n^{o(1)}$. En route, we develop an algorithmic toolkit for designing zero-knowledge data stream protocols, consisting of an algebraic streaming commitment protocol and a temporal commitment protocol.Our analyses rely on delicate algebraic and information-theoretic arguments and reductions from average-case communication complexity.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑