Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have some questions from previous years exams, I hope you could help me with them. :)

Suppose that a protocol satisfies the properties of a $\Sigma$-protocol, except that it is only (plain) honest-verifier zero-knowledge. Show how to transform this protocol into a $\Sigma$-protocol for the same relation by assuming that the verifier generates $c \in C$ at random (with uniform distribution), where $(C,+)$ is an additive finite group.

share|improve this question
Are you using "an additive finite group" for "a group whose binary operation is $\hspace{1.7 in}$ written $\textbf{+}$" or "a quotient group of $\langle \mathbb{Z},+\rangle$"? $\;\;$ – Ricky Demer Dec 4 '12 at 0:46
I think it is "a group whose binary operation is written +". – Peter De Vries Dec 4 '12 at 0:54
What is your (or your lecturer's) definition of a Sigma-protocol? I'm presuming (s)he is including full ZK among the properties since the question mentions "only HVZK", is that what you're after? – Bristol Dec 13 '12 at 14:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.