Algebraic Group Model with Oblivious Sampling

ePrint Report: Algebraic Group Model with Oblivious Sampling

Helger Lipmaa, Roberto Parisella, Janno Siim

In the algebraic group model (AGM), an adversary has to return with each group element a linear representation with respect to input group elements. In many groups, it is easy to sample group elements obliviously without knowing such linear representations. Since the AGM does not model this, it can be used to prove the security of spurious knowledge assumptions. We show several well-known zk-SNARKs use such …

adversary easy eprint report input linear oblivious report representation respect return roberto sample