We propose Data Tumbling Layer (DTL), a cryptographic scheme for non-interactive data tumbling. The core concept is to enable users to commit to specific data and subsequently re-use to the encrypted version of these data across different applications while removing the link to the previous data commit action. We define the following security and privacy notions for DTL: (i) no one-more redemption: a malicious user cannot redeem and use the same data more than the number of times they have committed the data; (ii) theft prevention: a malicious user cannot use data that has not been committed by them; (iii) non-slanderabilty: a malicious user cannot prevent an honest user from using their previously committed data; and (iv) unlinkability: a malicious user cannot link tainted data from an honest user to the corresponding data after it has been tumbled. To showcase the practicality of DTL, we use DTL to realize applications for (a) unlinkable fixed-amount payments; (b) unlinkable and confidential payments for variable amounts; (c) unlinkable weighted voting protocol. Finally, we implemented and evaluated all the proposed applications. For the unlinkable and confidential payment application, a user can initiate such a transaction in less than $1.5$s on a personal laptop. In terms of on-chain verification, the gas cost is less than $1.8$ million.
翻译:我们提出了数据翻滚层(DTL),一种用于非交互式数据翻滚的密码学方案。其核心概念是允许用户对特定数据进行承诺,随后在不同应用中重复使用这些数据的加密版本,同时移除与先前数据承诺行为的链接。我们为DTL定义了以下安全与隐私概念:(i)防多重赎回:恶意用户不能赎回并使用其承诺次数之外的数据;(ii)防窃取:恶意用户不能使用非其承诺的数据;(iii)防诽谤:恶意用户不能阻止诚实用户使用其先前承诺的数据;(iv)不可链接性:恶意用户无法将诚实用户的污染数据与其翻滚后的对应数据相关联。为展示DTL的实用性,我们利用DTL实现了以下应用:(a)不可链接的固定金额支付;(b)不可链接且保密的可变金额支付;(c)不可链接的加权投票协议。最后,我们实现并评估了所有提出的应用。对于不可链接且保密的支付应用,用户可在个人笔记本电脑上在$1.5$秒内发起此类交易。在链上验证方面,其燃气成本低于$180$万。