Subquadratic zero-knowledge

Abstract
We improve on the communication complexity of zero-knowledge proof systems. Let C bea boolean circuit of size n. Previous zero-knowledge proof systems for the satisfiabilityof C require the use of \Omega\Gamma kn) bit commitments in order to achieve a probability ofundetected cheating below 2\Gammak. In the case k = n, the communication complexity ofthese protocols istherefore\Omega\Gamman2) bit commitments.In this paper, we present a zero-knowledge proof system for achieving...

This publication has 21 references indexed in Scilit: