Cited by 904Cryptography and Data SecurityAdvanced Authentication Protocols SecurityCoding theory and cryptography

Non-interactive zero-knowledge and its applications

Open access
Blum, Manuel, Feldman, Paul, Micali, Silvio·1988·Proceedings of the twentieth annual ACM symposium on Theory of computing - STOC '88

Abstract

We show that interaction in any zero-knowledge proof can be replaced by sharing a common, short, random string. We use this result to construct the first public-key cryptosystem secure against chosen ciphertext attack.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1145/62212.62222

Cites

15 of 15 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Noninteractive proof systems, first introduced by Blum et al., do not require the concurrent availability of both parties.

    “Conversely, the noninteractive proof systems, first introduced by Blum et al. [137], do not require the concurrent availability of both parties.”

    From A Survey of Self-Sovereign Identity Ecosystem (2021) · cites this paper as [137]

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 4

  1. M. Blum, L. Blum and M. Shub,A simple and secure pseudo-randomnumber generator,SIAM Journal of Computing, 1986
  2. M. Blum and S. Micali, How To Generate Se- quences Of Cryptographically Strong Pseudo-Random Bits, SIAM J. on Computing, Vol. 13, Nov 1984, pp. 850-864
  3. Diffie, W., and M.E. Hellman, New Direc- tions in Cryptography,IEEE Trans. on Inform. The- ory,
  4. S. Goldwasser, and S. Micah, Probabilistic Encrypiion, JCSS Vol. 28, No. 2, April 1984.

Cited by

Sorted by citations

Authors
Blum, M., Feldman, P., & Micali, S.
Affiliations
  • University of California, Berkeley (US)
  • Massachusetts Institute of Technology (US)
Venue
Proceedings of the twentieth annual ACM symposium on Theory of computing - STOC '88
Publisher
ACM Press
Published
1988
Pages
103-112
OpenAlex
W2079913403
Cited by
904
References
15
Citations by year
2026: 21 · 2025: 60 · 2024: 54 · 2023: 54 · 2022: 52 · 2021: 58 · 2020: 53 · 2019: 50 · 2018: 34 · 2017: 32 · 2016: 32 · 2015: 39 · 2014: 29 · 2013: 29 · 2012: 24
FWCI
4.91
Type
conference paper
Language
en
Open access
Locations
ACM Symposium on Theory of Computing (STOC) (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
  • Physical Sciences › Computer Science › Artificial Intelligence › Coding theory and cryptography
Keywords
non-interactive zero-knowledge proofs, zero-knowledge proofs, public-key cryptosystems, chosen ciphertext attack, public-key encryption

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review