A Novel Construction of Constrained Verifiable Random Functions

<div>Circuit <span class="nowrap"><svg height="13.365pt" id="M970" style="vertical-align:-4.350679pt" version="1.1" viewbox="-0.0498162 -9.01432 25.74 13.365" width="25.74pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M449 645C392 682 336 687 293 687C136 687 37 594 37 499C37 397 122 342 207 329C176 273 159 217 159 158C159 48 247 -15 356 -15C417 -15 478 3 530 39S626 128 626 187C626 256 580 290 508 290C402 290 311 187 311 65L333 63C344 171 423 247 491 247C528 247 562 225 562 173C562 97 470 15 360 15C284 15 243 61 243 125C243 176 255 240 312 324C552 324 781 473 781 594C781 642 748 669 685 669C547 669 336 527 229 361C151 369 78 413 78 501C78 604 200 657 301 657C336 657 381 657 437 626L449 645ZM331 355C443 513 593 632 690 632C723 632 740 619 740 592C740 534 671 464 576 416C501 377 411 354 332 354L331 355Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,10.361,3.132)"><path d="M357 391C357 416 325 451 270 451C241 451 179 431 146 400C109 365 97 334 97 307C97 248 143 213 196 180C250 146 261 123 261 101C261 75 237 40 190 40C153 40 110 72 86 109C81 116 68 119 55 112C37 102 24 87 24 66C24 30 85 -12 137 -12C229 -12 331 62 331 140C331 189 304 218 236 260C197 284 164 309 164 346C164 381 194 400 220 400C259 400 282 380 304 350C310 342 321 339 330 344C347 353 357 372 357 391Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,13.91,3.132)"><path d="M485 418C485 434 469 451 441 451C389 451 312 387 255 335C221 304 194 278 159 242H157L259 678C264 698 264 710 255 710C242 710 183 681 96 673L90 643L128 642C165 641 171 640 162 602L24 -5L31 -12C51 -4 81 4 110 9L145 181C154 195 180 220 205 242C233 170 263 106 291 53C318 1 335 -12 360 -12C383 -12 425 0 483 82L463 105C437 79 411 57 400 57C388 57 378 68 355 110C329 156 288 244 268 298C299 333 355 376 405 376C426 376 440 373 448 368C453 365 465 368 468 373C477 386 485 405 485 418Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,18.542,3.132)"><path d="M98 134C72 134 46 117 46 90C46 73 55 65 60 64C95 55 124 32 124 -4C124 -42 95 -68 44 -89L57 -123C122 -104 194 -60 194 22C194 94 136 134 98 134Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,20.699,3.132)"><path d="M463 633C453 636 427 644 417 648C388 660 349 667 316 667C183 667 100 592 100 483C100 398 176 335 223 305L259 282C321 242 358 203 358 149C358 66 301 22 234 22C110 22 70 131 57 208L24 205L28 48C51 23 128 -17 215 -17C342 -17 446 60 446 174C446 262 394 310 317 361L284 383C229 420 183 455 183 515C183 569 222 628 298 628C384 628 418 563 428 481L461 487C459 527 458 593 463 633Z"></path></g></svg>.</span></div>

Security and Communication Networks

A Novel Construction of Constrained Verifiable Random Functions

Figure 9