TY - GEN
T1 - Spectra
T2 - 45th Annual International Conference on the Theory and Applications of Cryptographic Techniques, EUROCRYPT 2026
AU - Gao, Hao
AU - Wu, Qianhong
AU - Qin, Bo
AU - Wu, Fudong
AU - Ding, Zhenyang
AU - Wan, Zhiguo
N1 - Publisher Copyright:
© International Association for Cryptologic Research 2026.
PY - 2026
Y1 - 2026
N2 - A structured vector range argument proves that a committed vector v lies in a well-structured range of the form [0,2d-1]. This structure makes the protocol extremely efficient, although it cannot handle more sophisticated range assertions, such as those arising from non-membership attestations. To address this gap, we study a more general setting not captured by prior constructions. In this setting, for each i, the admissible integer set for vi is a union of k intervals Ri=def⋃j=0k-1li,j,ri,j. In this work, we present novel techniques to prove that v∈Zpn lies within R0×R1×⋯×Rn-1. We first introduce RangeLift, a generic compiler that lifts a structured vector range argument to support such unstructured range assertions. Then we present Spectra, a realization of RangeLift over the KZG-based vector commitment scheme. Spectra achieves succinct communication and verifier time; its prover complexity is OnlogNloglogN·log(nlogNloglogN), where N upper bounds the maximum interval size across all Ri. Notably, Spectra is interval-agnostic, meaning its prover complexity is independent of the number of intervals k; therefore, its prover cost matches the single-interval case even when each Ri is composed of hundreds of thousands of intervals. We also obtain two new structured vector range arguments and a batching-friendly variant of the Cq+ lookup argument (PKC’24), which are also of independent interest. Experiments show that Spectra outperforms well-known curve-based vector range arguments on standard metrics while supporting strictly more expressive range assertions.
AB - A structured vector range argument proves that a committed vector v lies in a well-structured range of the form [0,2d-1]. This structure makes the protocol extremely efficient, although it cannot handle more sophisticated range assertions, such as those arising from non-membership attestations. To address this gap, we study a more general setting not captured by prior constructions. In this setting, for each i, the admissible integer set for vi is a union of k intervals Ri=def⋃j=0k-1li,j,ri,j. In this work, we present novel techniques to prove that v∈Zpn lies within R0×R1×⋯×Rn-1. We first introduce RangeLift, a generic compiler that lifts a structured vector range argument to support such unstructured range assertions. Then we present Spectra, a realization of RangeLift over the KZG-based vector commitment scheme. Spectra achieves succinct communication and verifier time; its prover complexity is OnlogNloglogN·log(nlogNloglogN), where N upper bounds the maximum interval size across all Ri. Notably, Spectra is interval-agnostic, meaning its prover complexity is independent of the number of intervals k; therefore, its prover cost matches the single-interval case even when each Ri is composed of hundreds of thousands of intervals. We also obtain two new structured vector range arguments and a batching-friendly variant of the Cq+ lookup argument (PKC’24), which are also of independent interest. Experiments show that Spectra outperforms well-known curve-based vector range arguments on standard metrics while supporting strictly more expressive range assertions.
UR - https://www.scopus.com/pages/publications/105040341175
U2 - 10.1007/978-3-032-25336-1_6
DO - 10.1007/978-3-032-25336-1_6
M3 - 会议稿件
AN - SCOPUS:105040341175
SN - 9783032253354
T3 - Lecture Notes in Computer Science
SP - 148
EP - 177
BT - Advances in Cryptology – EUROCRYPT 2026 - 45th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Rome, Italy, May 10–14, 2026, Proceedings
A2 - Daemen, Joan
A2 - Thomé, Emmanuel
PB - Springer Science and Business Media Deutschland GmbH
Y2 - 10 May 2026 through 14 May 2026
ER -