HashWires: Hyperefficient Credential-Based Range Proofs
This paper presents HashWires, a hash-based range proof protocol that is applicable in settings for which there is a trusted third party (typically a credential issuer) that can generate commitments. We refer to these as “credential-based” range proofs (CBRPs). HashWires improves upon hashchain solu...
Main Authors: | , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Sciendo
2021-10-01
|
Series: | Proceedings on Privacy Enhancing Technologies |
Subjects: | |
Online Access: | https://doi.org/10.2478/popets-2021-0061 |
id |
doaj-a04a3e3a948a40daa2ab0a0bbf7d8758 |
---|---|
record_format |
Article |
spelling |
doaj-a04a3e3a948a40daa2ab0a0bbf7d87582021-09-05T14:01:11ZengSciendoProceedings on Privacy Enhancing Technologies2299-09842021-10-0120214769510.2478/popets-2021-0061HashWires: Hyperefficient Credential-Based Range ProofsChalkias Konstantinos0Cohen Shir1Lewi Kevin2Moezinia Fredric3Romailler Yolan4Novi / FacebookNovi / Facebook / TechnionNovi / FacebookNovi / FacebookNovi / Facebook / Kudelski SecurityThis paper presents HashWires, a hash-based range proof protocol that is applicable in settings for which there is a trusted third party (typically a credential issuer) that can generate commitments. We refer to these as “credential-based” range proofs (CBRPs). HashWires improves upon hashchain solutions that are typically restricted to micro-payments for small interval ranges, achieving an exponential speedup in proof generation and verification time. Under reasonable assumptions and performance considerations, a Hash-Wires proof can be as small as 305 bytes for 64-bit integers. Although CBRPs are not zero-knowledge and are inherently less flexible than general zero-knowledge range proofs, we provide a number of applications in which a credential issuer can leverage HashWires to provide range proofs for private values, without having to rely on heavyweight cryptographic tools and assumptions.https://doi.org/10.2478/popets-2021-0061range proofscredentialshash-chainsaccumulatorscryptographic commitmentsmalleabilitymicro-paymentslocation privacy |
collection |
DOAJ |
language |
English |
format |
Article |
sources |
DOAJ |
author |
Chalkias Konstantinos Cohen Shir Lewi Kevin Moezinia Fredric Romailler Yolan |
spellingShingle |
Chalkias Konstantinos Cohen Shir Lewi Kevin Moezinia Fredric Romailler Yolan HashWires: Hyperefficient Credential-Based Range Proofs Proceedings on Privacy Enhancing Technologies range proofs credentials hash-chains accumulators cryptographic commitments malleability micro-payments location privacy |
author_facet |
Chalkias Konstantinos Cohen Shir Lewi Kevin Moezinia Fredric Romailler Yolan |
author_sort |
Chalkias Konstantinos |
title |
HashWires: Hyperefficient Credential-Based Range Proofs |
title_short |
HashWires: Hyperefficient Credential-Based Range Proofs |
title_full |
HashWires: Hyperefficient Credential-Based Range Proofs |
title_fullStr |
HashWires: Hyperefficient Credential-Based Range Proofs |
title_full_unstemmed |
HashWires: Hyperefficient Credential-Based Range Proofs |
title_sort |
hashwires: hyperefficient credential-based range proofs |
publisher |
Sciendo |
series |
Proceedings on Privacy Enhancing Technologies |
issn |
2299-0984 |
publishDate |
2021-10-01 |
description |
This paper presents HashWires, a hash-based range proof protocol that is applicable in settings for which there is a trusted third party (typically a credential issuer) that can generate commitments. We refer to these as “credential-based” range proofs (CBRPs). HashWires improves upon hashchain solutions that are typically restricted to micro-payments for small interval ranges, achieving an exponential speedup in proof generation and verification time. Under reasonable assumptions and performance considerations, a Hash-Wires proof can be as small as 305 bytes for 64-bit integers. Although CBRPs are not zero-knowledge and are inherently less flexible than general zero-knowledge range proofs, we provide a number of applications in which a credential issuer can leverage HashWires to provide range proofs for private values, without having to rely on heavyweight cryptographic tools and assumptions. |
topic |
range proofs credentials hash-chains accumulators cryptographic commitments malleability micro-payments location privacy |
url |
https://doi.org/10.2478/popets-2021-0061 |
work_keys_str_mv |
AT chalkiaskonstantinos hashwireshyperefficientcredentialbasedrangeproofs AT cohenshir hashwireshyperefficientcredentialbasedrangeproofs AT lewikevin hashwireshyperefficientcredentialbasedrangeproofs AT moeziniafredric hashwireshyperefficientcredentialbasedrangeproofs AT romailleryolan hashwireshyperefficientcredentialbasedrangeproofs |
_version_ |
1717810625456898048 |