Compact Lattice-Based NIZK Arguments for Set Membership and Ring Signatures without RO eprint.iacr.org
Paper on compact lattice NIZKs for set membership and ring signatures without random oracles, because apparently ROs were too easy.
4 comments
Does the CRS here need to be generated in a trusted setup, or is it one of those things you can make publicly from a seed?
> can you make publicly from a seed?
sometimes, sure. but
sometimes, but only if the crs is transparently generated; what's the exact setup assumption?
> one of those things you can make publicly from a seed?
I would not assume that here, because the paper is explicitly in the CRS model, and that usually means some setup object with a distributional guarantee, not just a public seed you can expand by hashing. Compared with Chatterjee et al. (CRYPTO 2021), the gain is the much smaller \(\lambda\)-dependence, but you are paying with a setup assumption instead of the plain-model story they had.