{"extern":1,"date_published":"2011-11-21T00:00:00Z","intvolume":"      7073","acknowledgement":"This work was in part funded by the Swiss Hasler Foundation, and the EU FP7 grants 216483 and 216499, as well as by the NSF grant CNS-0716690.","year":"2011","volume":7073,"quality_controlled":0,"type":"conference","editor":[{"first_name":"Dong","last_name":"Lee","full_name":"Lee, Dong Hoon"},{"full_name":"Wang, Xiaoyun","last_name":"Wang","first_name":"Xiaoyun"}],"_id":"2975","publist_id":"3728","citation":{"mla":"Camenisch, Jan, et al. <i>A Framework for Practical Universally Composable Zero-Knowledge Protocols</i>. Edited by Dong Lee and Xiaoyun Wang, vol. 7073, Springer, 2011, pp. 449–67, doi:<a href=\"https://doi.org/10.1007/978-3-642-25385-0\">10.1007/978-3-642-25385-0</a>.","short":"J. Camenisch, S. Krenn, V. Shoup, in:, D. Lee, X. Wang (Eds.), Springer, 2011, pp. 449–467.","ista":"Camenisch J, Krenn S, Shoup V. 2011. A Framework for Practical Universally Composable Zero-Knowledge Protocols. ASIACRYPT: Theory and Application of Cryptology and Information Security, LNCS, vol. 7073, 449–467.","ieee":"J. Camenisch, S. Krenn, and V. Shoup, “A Framework for Practical Universally Composable Zero-Knowledge Protocols,” presented at the ASIACRYPT: Theory and Application of Cryptology and Information Security, 2011, vol. 7073, pp. 449–467.","ama":"Camenisch J, Krenn S, Shoup V. A Framework for Practical Universally Composable Zero-Knowledge Protocols. In: Lee D, Wang X, eds. Vol 7073. Springer; 2011:449-467. doi:<a href=\"https://doi.org/10.1007/978-3-642-25385-0\">10.1007/978-3-642-25385-0</a>","chicago":"Camenisch, Jan, Stephan Krenn, and Victor Shoup. “A Framework for Practical Universally Composable Zero-Knowledge Protocols.” edited by Dong Lee and Xiaoyun Wang, 7073:449–67. Springer, 2011. <a href=\"https://doi.org/10.1007/978-3-642-25385-0\">https://doi.org/10.1007/978-3-642-25385-0</a>.","apa":"Camenisch, J., Krenn, S., &#38; Shoup, V. (2011). A Framework for Practical Universally Composable Zero-Knowledge Protocols. In D. Lee &#38; X. Wang (Eds.) (Vol. 7073, pp. 449–467). Presented at the ASIACRYPT: Theory and Application of Cryptology and Information Security, Springer. <a href=\"https://doi.org/10.1007/978-3-642-25385-0\">https://doi.org/10.1007/978-3-642-25385-0</a>"},"abstract":[{"lang":"eng","text":"Zero-knowledge proofs of knowledge (ZK-PoK) for discrete logarithms and related problems are indispensable for practical cryptographic protocols. Recently, Camenisch, Kiayias, and Yung provided a specification language (the CKY-language) for such protocols which allows for a modular design and protocol analysis: for every zero-knowledge proof specified in this language, protocol designers are ensured that there exists an efficient protocol which indeed proves the specified statement.\n\nHowever, the protocols resulting from their compilation techniques only satisfy the classical notion of ZK-PoK, which is not retained are when they used as building blocks for higher-level applications or composed with other protocols.\nThis problem can be tackled by moving to the Universal Composability (UC) framework, which guarantees retention of security when composing protocols in arbitrary ways.  \nWhile there exist generic transformations from $\\Sigma$-protocols to UC-secure protocols, these transformation are often too inefficient for practice.\n \nIn this paper we introduce a specification language akin to the CKY-language and a compiler such that the resulting protocols are UC-secure and efficient. \nTo this end, we propose an extension of the UC-framework addressing the \nissue that UC-secure zero-knowledge proofs are by definition proofs of knowledge, and state a special composition theorem which allows one to use the weaker -- but more efficient and often sufficient -- notion of proofs of membership in the UC-framework.  \nWe believe that our contributions enable the design of practically efficient protocols that are UC-secure and thus themselves can be used as building blocks."}],"author":[{"full_name":"Camenisch, Jan","last_name":"Camenisch","first_name":"Jan"},{"id":"329FCCF0-F248-11E8-B48F-1D18A9856A87","orcid":"0000-0003-2835-9093","last_name":"Krenn","full_name":"Stephan Krenn","first_name":"Stephan"},{"first_name":"Victor","full_name":"Shoup, Victor","last_name":"Shoup"}],"date_created":"2018-12-11T12:00:39Z","conference":{"name":"ASIACRYPT: Theory and Application of Cryptology and Information Security"},"page":"449 - 467","status":"public","doi":"10.1007/978-3-642-25385-0","main_file_link":[{"url":"http://eprint.iacr.org/2011/228.pdf","open_access":"0"}],"alternative_title":["LNCS"],"day":"21","publication_status":"published","month":"11","date_updated":"2021-01-12T07:40:11Z","title":"A Framework for Practical Universally Composable Zero-Knowledge Protocols","publisher":"Springer"}