Welcome to the resource topic for 2022/1341
Title:
LaBRADOR: Compact Proofs for R1CS from Module-SIS
Authors: Ward Beullens, Gregor Seiler
Abstract:The most compact quantum-safe proof systems for large circuits are PCP-type systems such as Ligero, Aurora, and Shockwave, that only use weak cryptographic assumptions, namely hash functions modeled as random oracles. One would expect that by allowing for stronger assumptions, such as the hardness of Module-SIS, it should be possible to design more compact proof systems. But alas, despite considerable progress in lattice-based proofs, no such proof system was known so far. We rectify this situation by introducing a Lattice-Based Recursively Amortized Demonstration Of R1CS (LaBRADOR), with more compact proof sizes than known hash-based proof systems, both asymptotically and concretely for all relevant circuit sizes. LaBRADOR proves knowledge of a solution for an R1CS mod 2^{64}+1 with 2^{20} constraints, with a proof size of only 58 KB, an order of magnitude more compact than previous quantum-safe proofs.
ePrint: https://eprint.iacr.org/2022/1341
See all topics related to this paper.
Feel free to post resources that are related to this paper below.
Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.
For more information, see the rules for Resource Topics .