Paper 2023/364 Original: eprint.iacr.org/2023/364 ↗
Zero-Knowledge Arguments for Subverted RSA Groups
Abstract
This work investigates zero-knowledge protocols in subverted RSA groups where the prover can choose the modulus and where the verifier does not know the group order. We introduce a novel technique for extracting the witness from a general homomorphism over a group of unknown order that does not require parallel repetitions. We present a NIZK range proof for general homomorphisms such as Paillier encryptions in the designated verifier model that works under a subverted setup. The key ingredient of our proof is a constant sized NIZK proof of knowledge for a plaintext. Security is proven in the ROM assuming an IND-CPA additively homomorphic encryption scheme. The verifier's public key is reusable, can be maliciously generated and is linear in the number of proofs to be verified.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2023-08-30: last updated
- 2023-03-13: published
- Short URL
- https://ia.cr/2023/364
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2023/364,
author = {Dimitris Kolonelos and Mary Maller and Mikhail Volkhov},
title = {Zero-Knowledge Arguments for Subverted RSA Groups},
howpublished = {Cryptology {ePrint} Archive, Paper 2023/364},
year = {2023},
url = {https://eprint.iacr.org/2023/364}
}