3

zk-SNARK was a powerful tool for privacy-respecting e-cash. However, recent years, in the literatures about anonymous authentication scheme, such as group signatures, anonymous credential, blind signature, etc., the construction of these schemes did not use zk-SNARK as the NIZK tool, but traditional ways(Fiat-Shamir transform in ROM or CRS-based Groth-Sahai NIZK). So, my questions are:

  1. If one use zk-SNARK as NIZK tool in an anonymous authentication scheme, will it lead to some effiency or secure problems? and why?
  2. Can the zk-SNARK only be used in Blockchain-based privacy-preserving schemes or verifiable computation?

In other words, I wanna construct a group signatures/anonymous credential scheme by using zk-SNARK, due to its "succinct" proof. But for now I haven't found any literature about this counstruction method for group signatures/anonymous credential scheme. So the above questions are presented.

X.H. Yue
  • 498
  • 3
  • 11

1 Answers1

1

For now, I have gradually understood why the zk-SNARK cannot be suitable for constructing anonymous authentication scheme. That is the performance issue.

According to some references:

[1]Succinct Non-Interactive Zero Knowledge for a von Neumann Architecture;

[2]Comparing General Purpose zk-SNARKs

The zk-SNARK takes seconds to perform a proof operation. Therefore, due to the requirement of efficent computing for the prover is essential to an anonymous authentication scheme, the zk-SNARK cannot meet it.

X.H. Yue
  • 498
  • 3
  • 11