Cited by 96Cryptography and Data SecurityBlockchain Technology Applications and SecurityInternet Traffic Analysis and Secure E-voting

MatRiCT: Efficient, Scalable and Post-Quantum Blockchain Confidential Transactions Protocol

Esgin, Muhammed F., Zhao, Raymond K., Steinfeld, Ron, Liu, Joseph K., Liu, Dongxi·2019·Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security

Abstract

We introduce MatRiCT, an efficient RingCT protocol for blockchain confidential transactions, whose security is based on "post-quantum'' (module) lattice assumptions. The proof length of the protocol is around two orders of magnitude shorter than the existing post-quantum proposal, and scales efficiently to large anonymity sets, unlike the existing proposal. Further, we provide the first full implementation of a post-quantum RingCT, demonstrating the practicality of our scheme. In particular, a typical transaction can be generated in a fraction of a second and verified in about 23 ms on a standard PC. Moreover, we show how our scheme can be extended to provide auditability, where a user can select a particular authority from a set of authorities to reveal her identity. The user also has the ability to select no auditing and all these auditing options may co-exist in the same environment. The key ingredients, introduced in this work, of MatRiCT are 1) the shortest to date scalable ring signature from standard lattice assumptions with no Gaussian sampling required, 2) a novel balance zero-knowledge proof and 3) a novel extractable commitment scheme from (module) lattices. We believe these ingredients to be of independent interest for other privacy-preserving applications such as secure e-voting. Despite allowing 64-bit precision for transaction amounts, our new balance proof, and thus our protocol, does not require a range proof on a wide range (such as 32- or 64-bit ranges), which has been a major obstacle against efficient lattice-based solutions. Further, we provide new formal definitions for RingCT-like protocols, where the real-world blockchain setting is captured more closely. The definitions are applicable in a generic setting, and thus are believed to contribute to the development of future confidential transaction protocols in general (not only in the lattice setting).

Integrity signals

Registry

Crossref · 10.1145/3319535.3354200

Cites

28 of 28 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • MatRiCT is a lattice-based quantum resistant protocol built on RingCT, the protocol used by Monero to hide transaction amounts.

    “A group of scientists developed the MatRiCT lattice-based quantum resistant protocol built on ring confidential transactions (RingCT) which is the protocol used by Monero cryptocurrency to hide transaction amounts92.”

    From Quantum-resistance in blockchain networks (2023) · cites this paper as [92]

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Esgin, M. F., Zhao, R. K., Steinfeld, R., Liu, J. K., & Liu, D.
Affiliations
  • Commonwealth Scientific and Industrial Research Organisation (AU)
  • Monash University (AU)
Venue
Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
Publisher
ACM
Published
2019-11-06
Pages
567-584
ISSN
1543-7221 (ISSN-L)
OpenAlex
W2986657889
Cited by
96
References
27
Citations by year
2026: 9 · 2025: 14 · 2024: 13 · 2023: 15 · 2022: 22 · 2021: 13 · 2020: 10
FWCI
4.30
Type
conference paper
Language
en
Open access
closed
Locations
ACM SIGSAC Conference on Computer and Communications Security (CCS) (publishedVersion)
Funders
Australian Research Council (DP180102199)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
Keywords
confidential transactions, blockchain privacy, post-quantum cryptography, module lattices, ring signatures, zero-knowledge proofs, auditability, anonymity set

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review