Abstract Zero-knowledge succinct non-interactive arguments of knowledge (zk-SNARKs) are cryptographic protocols that offer efficient and privacy-preserving means of verifying NP language relations and have drawn considerable attention for their appealing applications, e.g., verifiable computation and anonymous payment protocol. Compared with the pre-quantum case, the practicability of this primitive in the post-quantum setting is still unsatisfactory, especially for the space complexity. To tackle this issue, this work seeks to enhance the efficiency and compactness of lattice-based zk-SNARKs, including proof length and common reference string (CRS) length. In this paper, we develop the framework of square span program-based SNARKs and design new zk-SNARKs over cyclotomic rings. Compared with previous works, our construction is without parallel repetition and achieves shorter proof and CRS lengths than previous lattice-based zk-SNARK schemes. Particularly, the proof length of our scheme is around $$23.3\%$$ 23.3 % smaller than the recent shortest lattice-based zk-SNARKs by Ishai et al. (in: Proceedings of the 2021 ACM SIGSAC conference on computer and communications security, pp 212–234, 2021), and the CRS length is $$3.6\times$$ 3.6 × smaller. Our constructions follow the framework of Gennaro et al. (in: Proceedings of the 2018 ACM SIGSAC conference on computer and communications security, pp 556–573, 2018), and adapt it to the ring setting by slightly modifying the knowledge assumptions. We develop concretely small constructions by using module-switching and key-switching procedures in a novel way.

Ciphertext-policy attribute-based encryption (CP- ABE) with verifiable outsourced decryption is a mechanism for secure fine-grained access control over encrypted data, and it is suitable for cloud computing applications. However, there exists a risk in CP-ABE with verifiable outsourced decryption that can lead to serious consequences and may limit its wide applications: the key generation center may have misbehavior. In this paper, we present BSA, the blockchain-based specification for ABE to mitigate this risk. We introduce the specification to regulate the data access control and a proof mechanism to supervise whether the key generation center has misbehavior. Also, we can provide decentralized and automated incentives with BSA by smart contracts and blockchain-based consensus.