#jsDisabledContent { display:none; } My Account | Register | Help

# Anonymous veto network

Article Id: WHEBN0019638080
Reproduction Date:

 Title: Anonymous veto network Author: World Heritage Encyclopedia Language: English Subject: Password Authenticated Key Exchange by Juggling Collection: Publisher: World Heritage Encyclopedia Publication Date:

### Anonymous veto network

In cryptography, the anonymous veto network (or AV-net) is a multi-party secure computation protocol to compute the boolean-OR function.[1] It presents an efficient solution to the Dining cryptographers problem.

## Description

All participants agree on a group $\scriptstyle G$ with a generator $\scriptstyle g$ of prime order $\scriptstyle q$ in which the discrete logarithm problem is hard. For example, a Schnorr group can be used. For a group of $\scriptstyle n$ participants, the protocol executes in two rounds.

Round 1: each participant $\scriptstyle i$ selects a random value $\scriptstyle x_i \,\in_R\, \mathbb\left\{Z\right\}_q$ and publishes the ephemeral public key $\scriptstyle g^\left\{x_i\right\}$ together with a zero-knowledge proof for the proof of the exponent $\scriptstyle x_i$.

After this round, each participant computes:

$g^\left\{y_i\right\} = \prod_\left\{j$i} g^{x_j}

Round 2: each participant $\scriptstyle i$ publishes $\scriptstyle g^\left\{c_i y_i\right\}$ and a zero-knowledge proof for the proof of the exponent $\scriptstyle c_i$. Here, the participants chose $\scriptstyle c_i \;=\; x_i$ if they want to send a "0" bit (no veto), or a random value if they want to send a "1" bit (veto).

After round 2, each participant computes $\scriptstyle \prod g^\left\{c_i y_i\right\}$. If no one vetoed, each will obtain $\scriptstyle \prod g^\left\{c_i y_i\right\} \;=\; 1$. On the other hand, if one or more participants vetoed, each will have $\scriptstyle \prod g^\left\{c_i y_i\right\} \;\neq\; 1$.

## The protocol design

The protocol is designed by combining random public keys in such a structured way to achieve a vanishing effect. In this case, $\scriptstyle \sum \left\{x_i \cdot y_i\right\} \;=\; 0$. For example, if there are three participants, then $\scriptstyle x_1 \cdot y_1 \,+\, x_1 \cdot y_2 \,+\, x_3 \cdot y_3 \;=\; x_1 \cdot \left(-x_2 \,-\, x_3\right) \,+\, x_2 \cdot \left(x_1 \,-\, x_3\right) \,+\, x_3 \cdot \left(x_1 \,+\, x_2\right) \;=\; 0$. A similar idea, though in a non-public-key context, can be traced back to David Chaum's original solution to the Dining cryptographers problem.[2]

## References

This article was sourced from Creative Commons Attribution-ShareAlike License; additional terms may apply. World Heritage Encyclopedia content is assembled from numerous content providers, Open Access Publishing, and in compliance with The Fair Access to Science and Technology Research Act (FASTR), Wikimedia Foundation, Inc., Public Library of Science, The Encyclopedia of Life, Open Book Publishers (OBP), PubMed, U.S. National Library of Medicine, National Center for Biotechnology Information, U.S. National Library of Medicine, National Institutes of Health (NIH), U.S. Department of Health & Human Services, and USA.gov, which sources content from all federal, state, local, tribal, and territorial government publication portals (.gov, .mil, .edu). Funding for USA.gov and content contributors is made possible from the U.S. Congress, E-Government Act of 2002.

Crowd sourced content that is contributed to World Heritage Encyclopedia is peer reviewed and edited by our editorial staff to ensure quality scholarly research articles.