[Resource Topic] 2021/1010: Circuit friendly, post-quantum dynamic accumulators from RingSIS with logarithmic prover time

Welcome to the resource topic for 2021/1010

Title:
Circuit friendly, post-quantum dynamic accumulators from RingSIS with logarithmic prover time

Authors: Endre (Silur) Abraham

Abstract:

Mainstream hash functions such as SHA or BLAKE while generally efficient in their implementations, are not suitable for zero-knowledge boolean or arithmetic circuits due to their reliance on CPU designs. As a candidate hash function that uses only on trivial arithmetics which can be generalized to zeroknowledge circuits, the Ajtai lattice SIS-hasher has been proposed. In this paper we review Micciancio’s R-SIS generalization and argue about it’s circuit complexity, then we show how this R-SIS hasher can be used as a universal dynamic hash accumulator that has constant-time update and revocation complexity, and can be run on 16-bit hardware as well as smart contracts.

ePrint: https://eprint.iacr.org/2021/1010

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .