{"id":"https://openalex.org/W4405182831","doi":"https://doi.org/10.1145/3658644.3670345","title":"LUNA: Quasi-Optimally Succinct Designated-Verifier Zero-Knowledge Arguments from Lattices","display_name":"LUNA: Quasi-Optimally Succinct Designated-Verifier Zero-Knowledge Arguments from Lattices","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405182831","doi":"https://doi.org/10.1145/3658644.3670345"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3670345","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670345","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670345","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670345","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013548422","display_name":"Ron Steinfeld","orcid":"https://orcid.org/0000-0003-1745-4183"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ron Steinfeld","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1745-4183","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057144969","display_name":"Amin Sakzad","orcid":"https://orcid.org/0000-0003-4569-3384"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Amin Sakzad","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4569-3384","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036381633","display_name":"Muhammed F. Esgin","orcid":null},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muhammed F. Esgin","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1650-3748","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057890876","display_name":"Veronika Kuchta","orcid":"https://orcid.org/0000-0002-7724-2601"},"institutions":[{"id":"https://openalex.org/I63772739","display_name":"Florida Atlantic University","ror":"https://ror.org/05p8w6387","country_code":"US","type":"education","lineage":["https://openalex.org/I63772739"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Veronika Kuchta","raw_affiliation_strings":["Florida Atlantic University, Boca Raton, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-7724-2601","affiliations":[{"raw_affiliation_string":"Florida Atlantic University, Boca Raton, FL, USA","institution_ids":["https://openalex.org/I63772739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001660300","display_name":"Mert Yassi","orcid":"https://orcid.org/0000-0001-7328-9501"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mert Yassi","raw_affiliation_strings":["Monash University, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7328-9501","affiliations":[{"raw_affiliation_string":"Monash University, Melbourne, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016060882","display_name":"Raymond K. Zhao","orcid":"https://orcid.org/0000-0003-1257-9147"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Raymond K. Zhao","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1257-9147","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2219,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.83752918,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3167","last_page":"3181"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/learning-with-errors","display_name":"Learning with errors","score":0.7790563106536865},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.7480729222297668},{"id":"https://openalex.org/keywords/zero-knowledge-proof","display_name":"Zero-knowledge proof","score":0.7203730344772339},{"id":"https://openalex.org/keywords/security-parameter","display_name":"Security parameter","score":0.7086237072944641},{"id":"https://openalex.org/keywords/lattice-problem","display_name":"Lattice problem","score":0.6371156573295593},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5244545936584473},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.4756976068019867},{"id":"https://openalex.org/keywords/lattice-based-cryptography","display_name":"Lattice-based cryptography","score":0.4749712646007538},{"id":"https://openalex.org/keywords/lemma","display_name":"Lemma (botany)","score":0.42830532789230347},{"id":"https://openalex.org/keywords/lattice","display_name":"Lattice (music)","score":0.42468810081481934},{"id":"https://openalex.org/keywords/gaussian","display_name":"Gaussian","score":0.42433929443359375},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4188712537288666},{"id":"https://openalex.org/keywords/random-oracle","display_name":"Random oracle","score":0.4130431115627289},{"id":"https://openalex.org/keywords/oblivious-transfer","display_name":"Oblivious transfer","score":0.4121345281600952},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.4067232012748718},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4045014977455139},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.37886500358581543},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.37655192613601685},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.20398053526878357},{"id":"https://openalex.org/keywords/quantum","display_name":"Quantum","score":0.19538921117782593},{"id":"https://openalex.org/keywords/quantum-information","display_name":"Quantum information","score":0.11346253752708435}],"concepts":[{"id":"https://openalex.org/C2779014939","wikidata":"https://www.wikidata.org/wiki/Q6510239","display_name":"Learning with errors","level":3,"score":0.7790563106536865},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.7480729222297668},{"id":"https://openalex.org/C176329583","wikidata":"https://www.wikidata.org/wiki/Q191943","display_name":"Zero-knowledge proof","level":3,"score":0.7203730344772339},{"id":"https://openalex.org/C2776711565","wikidata":"https://www.wikidata.org/wiki/Q7445058","display_name":"Security parameter","level":3,"score":0.7086237072944641},{"id":"https://openalex.org/C168482242","wikidata":"https://www.wikidata.org/wiki/Q6497128","display_name":"Lattice problem","level":3,"score":0.6371156573295593},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5244545936584473},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.4756976068019867},{"id":"https://openalex.org/C137660015","wikidata":"https://www.wikidata.org/wiki/Q6497083","display_name":"Lattice-based cryptography","level":5,"score":0.4749712646007538},{"id":"https://openalex.org/C2777759810","wikidata":"https://www.wikidata.org/wiki/Q149316","display_name":"Lemma (botany)","level":3,"score":0.42830532789230347},{"id":"https://openalex.org/C2781204021","wikidata":"https://www.wikidata.org/wiki/Q6497091","display_name":"Lattice (music)","level":2,"score":0.42468810081481934},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.42433929443359375},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4188712537288666},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.4130431115627289},{"id":"https://openalex.org/C53076038","wikidata":"https://www.wikidata.org/wiki/Q2915383","display_name":"Oblivious transfer","level":3,"score":0.4121345281600952},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.4067232012748718},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4045014977455139},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.37886500358581543},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.37655192613601685},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.20398053526878357},{"id":"https://openalex.org/C84114770","wikidata":"https://www.wikidata.org/wiki/Q46344","display_name":"Quantum","level":2,"score":0.19538921117782593},{"id":"https://openalex.org/C169699857","wikidata":"https://www.wikidata.org/wiki/Q2122243","display_name":"Quantum information","level":3,"score":0.11346253752708435},{"id":"https://openalex.org/C46757340","wikidata":"https://www.wikidata.org/wiki/Q43238","display_name":"Poaceae","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C144901912","wikidata":"https://www.wikidata.org/wiki/Q471906","display_name":"Quantum cryptography","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3670345","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670345","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670345","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3670345","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670345","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670345","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405182831.pdf"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W74973629","https://openalex.org/W101016172","https://openalex.org/W1936753088","https://openalex.org/W1985439922","https://openalex.org/W1994790157","https://openalex.org/W2018746447","https://openalex.org/W2043007983","https://openalex.org/W2067596507","https://openalex.org/W2144752539","https://openalex.org/W2177209050","https://openalex.org/W2210958136","https://openalex.org/W2400700555","https://openalex.org/W2498753511","https://openalex.org/W2765206040","https://openalex.org/W2794483369","https://openalex.org/W2794982701","https://openalex.org/W2866028610","https://openalex.org/W2950609069","https://openalex.org/W3159034445","https://openalex.org/W3211614912","https://openalex.org/W4238477653","https://openalex.org/W4394595246","https://openalex.org/W4399521780","https://openalex.org/W6724051779"],"related_works":["https://openalex.org/W3165155389","https://openalex.org/W2942635421","https://openalex.org/W3197081079","https://openalex.org/W3029306306","https://openalex.org/W2883036095","https://openalex.org/W2061949491","https://openalex.org/W1675210790","https://openalex.org/W2895855268","https://openalex.org/W4405182831","https://openalex.org/W2395302807"],"abstract_inverted_index":{"We":[0,163,265],"introduce":[1,165],"the":[2,24,115,124,127,133,139,143,157,262],"first":[3],"candidate":[4,39,168],"Lattice-based":[5],"designated":[6],"verifier":[7],"(DV)":[8],"zero":[9],"knowledge":[10],"sUccinct":[11],"Non-interactive":[12],"Argument":[13],"(ZK-SNARG)":[14],"protocol,":[15],"named":[16],"LUNA,":[17,73],"with":[18,101,105],"quasi-optimal":[19,71],"proof":[20,51,221,249],"length":[21],"(quasi-linear":[22],"in":[23,49,61,114,246,258,261,277],"security/privacy":[25,66],"parameter).":[26],"By":[27],"simply":[28],"relying":[29],"on":[30,138],"mildly":[31],"stronger":[32],"security":[33],"assumptions,":[34],"LUNA":[35,45],"is":[36,112],"also":[37,93],"a":[38,76,96,106,166,254],"ZK-SNARK":[40],"(i.e.":[41],"argument":[42],"of":[43,83,126,142,145,159,270],"knowledge).":[44],"achieves":[46],"significant":[47],"improvements":[48],"concrete":[50],"sizes,":[52,203],"reaching":[53],"below":[54],"6":[55],"KB":[56,60],"(compared":[57],"to":[58,182,253],">32":[59],"prior":[62,259],"work)":[63],"for":[64,80,189,200,209],"128-bit":[65],"level.":[67],"To":[68],"achieve":[69],"our":[70,179,267],"succinct":[72],"we":[74,135],"give":[75],"new":[77,167],"regularity":[78,180],"result":[79],"'private'":[81],"re-randomization":[82,109,128],"Module":[84,174,190,204],"LWE":[85],"(MLWE)":[86],"samples":[87],"using":[88],"discrete":[89,107],"Gaussian":[90,108,152],"randomization":[91],"vectors,":[92],"known":[94],"as":[95],"lattice-based":[97,280],"leftover":[98],"hash":[99],"lemma":[100],"leakage,":[102],"which":[103],"applies":[104],"parameter":[110,118,141],"that":[111],"polynomial":[113],"statistical":[116],"privacy":[117],"(avoiding":[119],"exponential":[120],"smudging),":[121],"and":[122,151,177,194,228,233,273],"hides":[123],"coset":[125],"vector":[129],"support":[130],"set.":[131],"Along":[132],"way,":[134],"derive":[136],"bounds":[137],"smoothing":[140],"intersection":[144],"short":[146],"integer":[147],"solution":[148],"(SIS),":[149],"gadget,":[150],"perp":[153],"module":[154],"lattices":[155],"over":[156],"power":[158],"2":[160],"cyclotomic":[161],"rings.":[162],"then":[164],"linear-only":[169],"homomorphic":[170,186,248],"encryption":[171,229,256],"scheme":[172],"called":[173],"Half-GSW":[175],"(HGSW),":[176],"apply":[178],"theorem":[181],"provide":[183],"smudging-free":[184],"circuit-private":[185],"linear":[187,247],"operations":[188],"HGSW.":[191],"Our":[192],"implementation":[193],"experimental":[195],"performance":[196,208],"evaluation":[197],"show":[198],"that,":[199],"typical":[201],"instance":[202],"HGSW":[205],"provides":[206],"favourable":[207],"ZK-SNARG":[210,263],"applications":[211],"involving":[212],"lightweight":[213],"verifiers.":[214],"It":[215],"enables":[216],"significantly":[217],"(around":[218],"5x)":[219],"shorter":[220],"lengths":[222],"while":[223,240],"speeding":[224,234],"up":[225,235],"CRS":[226],"generation":[227,250],"time":[230,237,244],"by":[231,238],"4-16x":[232],"decryption":[236],"4.3x,":[239],"incurring":[241],"just":[242],"1.2-2x":[243],"overhead":[245],"operations,":[251],"compared":[252],"Regev":[255],"used":[257],"work":[260],"context.":[264],"believe":[266],"techniques":[268],"are":[269],"independent":[271],"interest":[272],"will":[274],"find":[275],"application":[276],"other":[278],"privacy-preserving":[279],"protocols.":[281]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}