[Resource Topic] 2017/894: An Efficient Pairing-Based Shuffle Argument

Welcome to the resource topic for 2017/894

An Efficient Pairing-Based Shuffle Argument

Authors: Prastudy Fauzi, Helger Lipmaa, Janno Siim, Michal Zajac


We construct the most efficient known pairing-based NIZK shuffle argument. It consists of three subarguments that were carefully chosen to obtain optimal efficiency of the shuffle argument: * A same-message argument based on the linear subspace QANIZK argument of Kiltz and Wee, * A (simplified) permutation matrix argument of Fauzi, Lipmaa, and ZajÄ…c, * A (simplified) consistency argument of Groth and Lu. We prove the knowledge-soundness of the first two subarguments in the generic bilinear group model, and the culpable soundness of the third subargument under a KerMDH assumption. This proves the soundness of the shuffle argument. We also discuss our partially optimized implementation that allows one to prove a shuffle of 100\,000 ciphertexts in less than a minute and verify it in less than 1.5 minutes.

ePrint: https://eprint.iacr.org/2017/894

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .