[Resource Topic] 2022/994: Faster Sounder Succinct Arguments and IOPs

Welcome to the resource topic for 2022/994

Title:
Faster Sounder Succinct Arguments and IOPs

Authors: Justin Holmgren, Ron Rothblum

Abstract:

Succinct arguments allow a prover to convince a verifier that a given statement is true, using an extremely short proof. A major bottleneck that has been the focus of a large body of work is in reducing the overhead incurred by the prover in order to prove correctness of the computation. By overhead we refer to the cost of proving correctness, divided by the cost of the original computation.

In this work, for a large class of Boolean circuits C=C(x,w), we construct succinct arguments for the language \{ x : \exists w\; C(x,w)=1\}, with 2^{-\lambda} soundness error, and with prover overhead \mathsf{polylog}(\lambda). This result relies on the existence of (sub-exponentially secure) linear-size computable collision-resistant hash functions. The class of Boolean circuits that we can handle includes circuits with a repeated sub-structure, which arise in natural applications such as batch computation/verification, hashing and related block chain applications.

The succinct argument is obtained by constructing \emph{interactive oracle proofs} for the same class of languages, with \mathsf{polylog}(\lambda) prover overhead, and soundness error 2^{-\lambda}. Prior to our work, the best IOPs for Boolean circuits either had prover overhead of \mathsf{polylog}(|C|) based on efficient PCPs due to Ben-Sasson et al. (STOC, 2013) or \mathsf{poly}(\lambda) due to Rothblum and Ron-Zewi (STOC, 2022).

ePrint: https://eprint.iacr.org/2022/994

Talk: https://www.youtube.com/watch?v=fiGbYWQEbPg

Slides: https://iacr.org/submit/files/slides/2022/crypto/crypto2022/413/slides.pdf

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .