[Colloquium] (REMINDER) [Staff] : Proofs of Space with Maximal Hardness- Friday, October 25th

Abigail Santana via Colloquium colloquium at mailman.cs.uchicago.edu
Wed Oct 23 09:19:39 CDT 2024


UNIVERSITY OF CHICAGO
COMPUTER SCIENCE DEPARTMENT
PRESENTS

Leonid Reyzin
Professor of Computer Science
Boston University

Friday, October 25th
1:30pm - 2:30pm
In Person: John Crerar Library 346

Title: Proofs of Space with Maximal Hardness

Abstract: In a proof of space, a prover performs a complex computation with a large output. A verifier periodically checks that the prover still holds the output. The security goal for a proof of space construction is to ensure that a prover who erases even a portion of the output has to redo a large portion of the complex computation in order to satisfy the verifier.

In existing constructions of proofs of space, the computation that a cheating prover is forced to redo is a small fraction (vanishing or small constant) of the original complex computation. The only exception is a construction of Pietrzak (ITCS 2019) that requires extremely depth-robust graphs, which result in impractically high complexity of the initialization process.

We present the first proof of space of reasonable complexity that ensures that the prover has to redo almost the entire computation (fraction arbitrarily close to 1) when trying to save even an arbitrarily small constant fraction of the space. Our construction is a generalization of an existing construction called SDR (Fisch, Eurocrypt 2019) deployed on the Filecoin blockchain. Our improvements, while general, also demonstrate that the already deployed construction has considerably better security than previously shown.

Technically, our construction can be viewed as amplifying predecessor-robust graphs. These are directed acyclic graphs in which every set of $\pi \cdot n$ nodes contains a subset of $\alpha_\pi \cdot n$ nodes whose induced subgraph has just one sink. We take a predecessor-robust graph with constant parameters $(\pi, \alpha_\pi)$, and build a bigger predecessor-robust graph with a near-optimal set of parameters and additional guarantees on sink placement, while increasing the degree only by a small additive constant.

https://eprint.iacr.org/2023/1530<https://urldefense.com/v3/__https://eprint.iacr.org/2023/1530__;!!BpyFHLRN4TMTrA!7AJasgVG2cf5nUQlMcQdPYILrSwJUrV4oD_Ya1atnZrNiiNOa8ujsJSsahTULC8xQD7wLIjQfNH-l-t6Q_Na8Md0zDZBBF4c0vboU10$>


[cid:d58f8dec-a7f3-4a23-a2c7-3575d9ce7c69]



Host: David Cash
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20241023/b3af2594/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Leonid Reyzin headshot.png
Type: image/png
Size: 124921 bytes
Desc: Leonid Reyzin headshot.png
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20241023/b3af2594/attachment-0001.png>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00001.txt
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20241023/b3af2594/attachment-0002.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00002.txt
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20241023/b3af2594/attachment-0003.txt>


More information about the Colloquium mailing list