Zero-Knowledge Arguments for Subverted RSA Groups

Web: https://iacr.org/news/item/20309

ePrint Report: Zero-Knowledge Arguments for Subverted RSA Groups

Dimitris Kolonelos, Mary Maller, Mikhail Volkhov

This work investigates zero-knowledge protocols in subverted RSA groups where the prover can choose the modulus and where the verifier does not know the group order. We introduce a novel technique for extracting the witness from a general homomorphism over a group of unknown order that does not require parallel repetitions. We present a NIZK range proof for general homomorphisms such as Paillier encryptions in the …

eprint report knowledge rsa