Skip to content

Home > Resources > papers > BS23-LaBRADOR

LaBRADOR: Compact Proofs for R1CS from Module-SIS (Beullens, Seiler 2023)

Last modified: 2026-10-27
DOI: 10.1007/978-3-031-38554-4_17 · URL: https://doi.org/10.1007/978-3-031-38554-4_17

Summary

A lattice-based proof system for R1CS whose proofs are much smaller than hash-based alternatives at post-quantum security, built on Module-SIS with a recursive amortization technique (CRYPTO 2023). Cited in BL26-SoK-AnonCreds among the lattice-based proof systems that are natural candidates once credentials move to lattice signatures such as ML-DSA.