BDH ⇒ NIZK
Statement
Migrated verbatim from bilinear-map-assumptions § Known Results:
- DLIN (Decision Linear) assumption: a generalization of BDDH; more conservative and used in e.g. Groth-Sahai proofs — standard
Migrated verbatim from non-interactive-zero-knowledge § Other results:
- Pairing-based NIZK (Groth-Sahai proofs, Groth16) achieves constant or logarithmic proof size — Gro16
Notes
class: unstated: no citing page says which notion of reduction is meant.
Recording a class the wiki does not state would add a claim.
This relation is stated on 2 pages; the statements above are all of them.
Recorded during migration and not fixed — these are claims about the source text, not changes to it:
- Groth-Sahai proofs marked standard; GS08 is attributable and missing.
- Conclusion typed as NIZK; Groth-Sahai is specifically a NIZK proof system for pairing-product equations in the CRS model.
- Two constructions bundled (Groth-Sahai proofs and Groth16) under a single Gro16 citation; Groth-Sahai (GS08) is uncited and has no reference page.
- The hypothesis (‘pairing-based’) is not a named assumption; Groth16 additionally needs a knowledge-of-exponent-style assumption or the generic/algebraic group model, which is not stated - arguably model should be generic-group.
- SUSPECT: Groth-Sahai proofs are not constant-size in general (they are constant per equation, linear in the number of equations). Report only.