We instantiate the HE with class-group encryption, for which we show the crucial additional properties hold.

n/n

In this work, we propose a technique by using homomorphic encryption (HE) with certain properties, which translates any sigma-ZKP for algebraic relation to support straight-line extraction, without repeating.

4/n

For UC security of the entire scheme, the underlying ZKP must have a straight-line extractability. Existing techniques to achieve straight-line extractability rely on repeating the proof multiple times.

3/n

Straightline extraction is a crucial property of ZKP, which is essential for UC security. E.g., an optimized threshold BLS signature may employ a non-interactive ZKP for partial verification (instead of pairing) to attest that Hash(msg) and g_2 have the same exponent (Chaum-Pederson proof).

2/n

Yeah, I was wearing one ;)

Yeah, it was a last minute change unfortunately :-( sorry for any inconvenience (though, I have seen people not following it strictly), hope it worked ok?

Adi's place?