{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:27:10Z","timestamp":1783787230253,"version":"3.55.0"},"reference-count":55,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,5]]},"DOI":"10.1109\/sp.2015.23","type":"proceedings-article","created":{"date-parts":[[2015,7,22]],"date-time":"2015-07-22T20:07:58Z","timestamp":1437595678000},"page":"253-270","source":"Crossref","is-referenced-by-count":145,"title":["Geppetto: Versatile Verifiable Computation"],"prefix":"10.1109","author":[{"given":"Craig","family":"Costello","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cedric","family":"Fournet","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jon","family":"Howell","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Markulf","family":"Kohlweiss","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Benjamin","family":"Kreuter","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Naehrig","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bryan","family":"Parno","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Samee","family":"Zahur","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"TrueSet: Nearly practical verifiable set computations","author":"kosba","year":"0","journal-title":"Proc of USENIX Security 2014"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/129712.129782"},{"key":"ref33","article-title":"Short pairing-based non-interactive zero-knowledge arguments","author":"groth","year":"0","journal-title":"IACR ASIACRYPT 2010"},{"key":"ref32","article-title":"Uncheatable distributed computations","author":"golle","year":"0","journal-title":"Proc CT-RSA 2001"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1137\/0218012"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1374376.1374396"},{"key":"ref37","author":"kilian","year":"1989","journal-title":"Uses of Randomness in Algorithms and Protocols"},{"key":"ref36","article-title":"METIS 5.1.0: A software package for partitioning unstructured graphs, partitioning meshes, and computing fill-reducing orderings of sparse matrices","author":"karypis","year":"2013","journal-title":"Technical Report"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79456-1_6"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78967-3_24"},{"key":"ref28","article-title":"Non-interactive verifiable computing: Outsourcing computation to untrusted workers","author":"gennaro","year":"0","journal-title":"Proceedings of IACR CRYPTO 2010"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/505452.505453"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38348-9_37"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/273865.273901"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15497-3_10"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/571637.571640"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2090236.2090245"},{"key":"ref21","article-title":"Identity-based cryptosystems based on the Weil pairing","author":"cocks","year":"0","journal-title":"Manuscript 2001"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48658-5_19"},{"key":"ref23","article-title":"Geppetto: Versatile verifiable computation","author":"costello","year":"2014","journal-title":"Cryptology ePrint Archive Report"},{"key":"ref26","article-title":"Fine-tuning Groth-Sahai proofs","author":"escala","year":"2013","journal-title":"Cryptology ePrint Archive Report"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2517872.2517878"},{"key":"ref50","article-title":"Making argument systems for outsourced computation practical (some-times)","author":"setty","year":"0","journal-title":"Proceedings of the ISOC NDSS 2012"},{"key":"ref51","article-title":"Query execution assurance for outsourced databases","author":"sion","year":"0","journal-title":"Proc of VLDB 2005"},{"key":"ref55","article-title":"SLOCCount","author":"wheeler","year":"0"},{"key":"ref54","article-title":"Efficient RAM and control flow in verifiable outsourced compu-tation","author":"wahby","year":"2015","journal-title":"Proc ISOC NDSS"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78524-8_1"},{"key":"ref52","article-title":"Time-optimal interactive proofs for circuit evaluation","author":"thaler","year":"0","journal-title":"Proc of IACR CRYPTO 2013"},{"key":"ref10","article-title":"Succinct non-interactive zero knowledge for a von Neumann architecture","author":"ben-sasson","year":"0","journal-title":"Proc of USENIX Security 2014"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2488608.2488623"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1991.185352"},{"key":"ref13","article-title":"Identity-based encryption from the Weil pairing","author":"boneh","year":"0","journal-title":"Proceedings of IACR CRYPTO 2001"},{"key":"ref14","doi-asserted-by":"crossref","DOI":"10.1006\/jsco.1996.0125","article-title":"The Magma algebra sys-tem. I. the user language","volume":"24","author":"bosma","year":"1997","journal-title":"J Symbolic Comput"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jco.2004.09.009"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522733"},{"key":"ref17","article-title":"Efficient non-trans-ferable anonymous multi-show credential system with optional anonymity revocation","author":"camenisch","year":"0","journal-title":"EuroCrypt 2001"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/509978.509980"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/11889663_7"},{"key":"ref4","article-title":"Automated synthesis of privacy-preserving distributed applications","author":"backes","year":"2012","journal-title":"Proc of ISOC NDSS"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.24"},{"key":"ref6","doi-asserted-by":"crossref","DOI":"10.1007\/11693383_22","article-title":"Pairing-friendly elliptic curves of prime order","author":"barreto","year":"2006","journal-title":"Selected Areas in Cryptography (SAC)"},{"key":"ref5","article-title":"Anonymous credentials light","author":"baldimtsi","year":"0","journal-title":"Proceedings of ACM CCS 2013"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.4086\/toc.2013.v009a021"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.36"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2465351.2465359"},{"key":"ref9","article-title":"Scalable zero knowledge via cycles of elliptic curves","author":"ben-sasson","year":"2014","journal-title":"Proc of CRYPTO"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.47"},{"key":"ref45","article-title":"New explicit conditions of elliptic curve traces for FR-reduction","volume":"84","author":"miyaji","year":"2001","journal-title":"IEICE Trans on Fundamentals"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046564"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-1460-5"},{"key":"ref42","article-title":"ZKPDL: A language-based system for efficient zero-knowledge proofs and electronic cash","author":"meiklejohn","year":"2010","journal-title":"Proc of USENIX"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2005.14"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539795284959"},{"key":"ref43","article-title":"A certified digital signature","author":"merkle","year":"1989","journal-title":"Proc of CRYPTO"}],"event":{"name":"2015 IEEE Symposium on Security and Privacy (SP)","location":"San Jose, CA","start":{"date-parts":[[2015,5,17]]},"end":{"date-parts":[[2015,5,21]]}},"container-title":["2015 IEEE Symposium on Security and Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7160813\/7163005\/07163030.pdf?arnumber=7163030","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,11,6]],"date-time":"2018-11-06T02:41:31Z","timestamp":1541472091000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7163030\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,5]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/sp.2015.23","relation":{},"subject":[],"published":{"date-parts":[[2015,5]]}}}