{"id":"https://openalex.org/W4414017109","doi":"https://doi.org/10.46586/tches.v2025.i4.341-385","title":"Accelerating Hash-Based Polynomial Commitment Schemes with Linear Prover Time","display_name":"Accelerating Hash-Based Polynomial Commitment Schemes with Linear Prover Time","publication_year":2025,"publication_date":"2025-09-05","ids":{"openalex":"https://openalex.org/W4414017109","doi":"https://doi.org/10.46586/tches.v2025.i4.341-385"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2025.i4.341-385","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.341-385","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12413/12142","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/12413/12142","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039069424","display_name":"Florian Hirner","orcid":"https://orcid.org/0000-0002-2151-4436"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Florian Hirner","raw_affiliation_strings":["Institute of Information Security, Graz University of Technology, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, Graz University of Technology, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106492640","display_name":"Florian Krieger","orcid":"https://orcid.org/0009-0006-5778-2447"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Florian Krieger","raw_affiliation_strings":["Institute of Information Security, Graz University of Technology, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, Graz University of Technology, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119549526","display_name":"Constantin Piber","orcid":null},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Constantin Piber","raw_affiliation_strings":["Institute of Information Security, Graz University of Technology, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, Graz University of Technology, Austria","institution_ids":["https://openalex.org/I4092182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089396173","display_name":"Sujoy Sinha Roy","orcid":"https://orcid.org/0000-0002-9805-5389"},"institutions":[{"id":"https://openalex.org/I4092182","display_name":"Graz University of Technology","ror":"https://ror.org/00d7xrm67","country_code":"AT","type":"education","lineage":["https://openalex.org/I4092182"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Sujoy Sinha Roy","raw_affiliation_strings":["Institute of Information Security, Graz University of Technology, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, Graz University of Technology, Austria","institution_ids":["https://openalex.org/I4092182"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4092182"],"apc_list":null,"apc_paid":null,"fwci":2.249,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.89895248,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"2025","issue":"4","first_page":"341","last_page":"385"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gas-meter-prover","display_name":"Gas meter prover","score":0.8500607013702393},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.60153728723526},{"id":"https://openalex.org/keywords/time-complexity","display_name":"Time complexity","score":0.5752238035202026},{"id":"https://openalex.org/keywords/polynomial","display_name":"Polynomial","score":0.5075849294662476},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.501124382019043},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3830583393573761},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.378167062997818},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3575708270072937},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1763351857662201}],"concepts":[{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.8500607013702393},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.60153728723526},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.5752238035202026},{"id":"https://openalex.org/C90119067","wikidata":"https://www.wikidata.org/wiki/Q43260","display_name":"Polynomial","level":2,"score":0.5075849294662476},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.501124382019043},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3830583393573761},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.378167062997818},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3575708270072937},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1763351857662201},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2025.i4.341-385","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.341-385","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12413/12142","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:4776941632b042918680467bc461077e","is_oa":true,"landing_page_url":"https://doaj.org/article/4776941632b042918680467bc461077e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2025, Iss 4 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2025.i4.341-385","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2025.i4.341-385","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/12413/12142","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320326047","display_name":"Amt der Steierm\u00e4rkischen Landesregierung","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414017109.pdf","grobid_xml":"https://content.openalex.org/works/W4414017109.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2899793048","https://openalex.org/W2950202488","https://openalex.org/W1594411369","https://openalex.org/W4385887367","https://openalex.org/W2811088724","https://openalex.org/W3023219121","https://openalex.org/W2035244949","https://openalex.org/W1515104600","https://openalex.org/W2891063150","https://openalex.org/W1774334694"],"abstract_inverted_index":{"Zero-knowledge":[0],"proofs":[1],"(ZKPs)":[2],"are":[3,30,40,46],"cryptographic":[4],"protocols":[5],"that":[6,133,167],"enable":[7,53],"one":[8],"party":[9],"to":[10,78,147,217,267,271,313,317],"prove":[11],"the":[12,102,219,233,255,272,318],"validity":[13],"of":[14,89,123,258,283,286,321],"a":[15,81,96,182,203,281],"statement":[16],"without":[17],"revealing":[18],"any":[19],"information":[20],"beyond":[21],"its":[22,49],"truth.":[23],"Central":[24],"building":[25],"blocks":[26],"in":[27,105,215],"many":[28],"ZKPs":[29],"polynomial":[31,84],"commitment":[32,216,293],"schemes":[33],"(PCS)":[34],"where":[35],"constructions":[36],"with":[37,240,299],"linear-time":[38,54,60],"provers":[39],"especially":[41],"attractive.":[42],"Two":[43],"such":[44],"examples":[45],"Brakedown":[47],"and":[48,55,79,116,125,142,151,222,262,274,294],"extension":[50],"Orion,":[51],"which":[52],"quantum-resistant":[56],"proving":[57,80,295],"by":[58,108,156,173,311],"leveraging":[59],"encodable":[61],"Spielman":[62,114],"codes.":[63],"However,":[64],"these":[65,229],"PCS":[66,107,238],"operate":[67],"over":[68,157,198],"large":[69,170,199],"datasets,":[70],"creating":[71],"significant":[72],"computational":[73],"bottlenecks.":[74],"For":[75],"example,":[76],"committing":[77],"degree":[82],"228":[83],"requires":[85],"around":[86],"1.1":[87],"GB":[88],"data":[90,124,172,200],"while":[91],"taking":[92],"463":[93],"seconds":[94],"on":[95,245],"high-end":[97],"server":[98],"CPU.This":[99],"work":[100],"addresses":[101],"performance":[103],"bottleneck":[104],"Orion-like":[106],"optimizing":[109],"their":[110],"most":[111],"critical":[112],"operations:":[113],"encoding":[115],"Merkle":[117,195],"commitments.":[118],"These":[119],"operations":[120],"involve":[121],"Gigabytes":[122],"suffer":[126],"from":[127],"random":[128,149],"off-chip":[129,136,153],"memory":[130,154],"access":[131],"patterns":[132],"drastically":[134],"reduce":[135,152],"bandwidth.":[137],"We":[138,179],"resolve":[139],"this":[140],"issue":[141],"introduce":[143],"inverted":[144],"expander":[145,175],"graphs":[146,176],"eliminate":[148],"writes":[150],"accesses":[155],"50%.":[158],"Additionally,":[159],"we":[160,193,209,231,253],"propose":[161],"an":[162,246,302],"on-the-fly":[163],"graph":[164,189],"sampling":[165],"method":[166],"avoids":[168],"streaming":[169],"auxiliary":[171],"generating":[174],"dynamically":[177],"on-chip.":[178],"also":[180],"provide":[181],"formal":[183],"security":[184],"proof":[185,226,290],"for":[186,237,288],"our":[187,264,306],"proposed":[188],"transformation.":[190],"Beyond":[191],"encoding,":[192],"accelerate":[194,218],"Tree":[196],"construction":[197],"sets":[201],"through":[202],"scalable":[204],"multi-pass":[205],"SHA3":[206],"pipeline.":[207],"Finally,":[208],"reutilize":[210],"existing":[211],"hardware":[212,235],"components":[213],"used":[214],"so-called":[220],"proximity":[221],"consistency":[223],"checks":[224],"during":[225],"generation.Building":[227],"upon":[228],"concepts,":[230],"present":[232],"first":[234],"architecture":[236,266],"\u2013":[239,244,315],"linear":[241],"prover":[242],"time":[243],"Xilinx":[247],"Alveo":[248],"U280":[249],"FPGA.":[250,276],"In":[251],"addition,":[252],"discuss":[254],"practical":[256],"challenges":[257],"manually":[259],"partitioning,":[260],"placing,":[261],"routing":[263],"large-scale":[265],"efficiently":[268],"map":[269],"it":[270],"multi-SLR":[273],"HBM-equipped":[275],"The":[277],"final":[278],"implementation":[279],"achieves":[280],"speedup":[282],"two":[284],"orders":[285],"magnitude":[287],"full":[289],"generation,":[291],"covering":[292],"steps.":[296],"When":[297],"combined":[298],"Virgo":[300],"as":[301],"outer":[303],"CP-SNARK":[304],"protocol,":[305],"accelerator":[307],"reduces":[308],"end-to-end":[309],"latency":[310],"up":[312],"3.85x":[314],"close":[316],"theoretical":[319],"maximum":[320],"3.9x.":[322]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}