Welcome to the resource topic for
**2024/1264**

**Title:**

Succinct Non-Subsequence Arguments

**Authors:**
San Ling, Khai Hanh Tang, Khu Vu, Huaxiong Wang, Yingfei Yan

**Abstract:**

Lookup arguments have recently attracted a lot of developments due to their applications in the constructions of succinct non-interactive arguments of knowledge (SNARKs). A closely related topic is subsequence arguments in which one can prove that string \mathbf{s} is a subsequence of another string \mathbf{t}, i.e., deleting some characters in \mathbf{t} can achieve \mathbf{s}. A dual notion, namely, non-subsequence arguments, is to prove that \mathbf{s} is not a subsequence of \mathbf{t}.

These problems have a lot of important applications in DNA sequence analysis, internet of things, blockchains, natural language processing, speech recognition, etc. However, despite their applications, they are not well-studied in cryptography, especially succinct arguments for non-subsequences with efficient proving time and sublinear verification time.

In this work, we propose the first succinct non-subsequence argument. Our solution applies the sumcheck protocol and is instantiable by any multivariate polynomial commitment schemes (PCSs). We achieve an efficient prover whose running time is linear in the size of sequences \mathbf{s}, \mathbf{t} and their respective alphabet \Sigma. Our proof is succinct and the verifier time is sublinear assuming the employed PCS has succinct commitments and sublinear verification time. When instantiating with Sona PCS (EUROCRYPTâ€™24), we achieve proof size \mathcal{O}(\log_2|\mathbf{s}| + \log_2|\mathbf{t}|+\log_2|\Sigma|), prover time \mathcal{O}(|\mathbf{s}|+|\mathbf{t}|+|\Sigma|) and verifier time \mathcal{O}(\sqrt{|\mathbf{s}|}+\sqrt{|\mathbf{t}|}+\sqrt{|\Sigma|}).

Extending our technique, we can achieve a batch subsequence argument for proving in batch k interleaving subsequence and non-subsequence arguments without proof size suffering a linear blow-up in k.

**ePrint:**
https://eprint.iacr.org/2024/1264

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

**Example resources include:**
implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .