# Timeline for sequential composition of honest verifier zero knowledge proof

### Current License: CC BY-SA 4.0

9 events
when toggle format what by license comment
Oct 17 '21 at 21:02 history CommunityBot This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Oct 16 '21 at 20:42 comment 2 cents by a rookie (me) about the the term "closed" @GeoffroyCouteau : in section 4.3.4 of Foundations of Cryptography vol 1 Oded Goldreich writes: "An intuitive requirement that a definition of zero-knowledge proofs must satisfy is that zero-knowledge proofs should be closed under sequential composition. [...] Interestingly, zero-knowledge proofs as defined in Definition 4.3.2 are not closed under sequential composition, and this fact is indeed ..."
Sep 17 '21 at 20:25 answer timeline score: 1
Apr 17 '21 at 21:28 comment Is there a formal proof of this in the literature, @GeoffroyCouteau?
Sep 28 '20 at 7:07 comment The sequential composition of HVZK protocols is still HVZK, yes. I'm not sure the term "closed" is appropriate when talking about protocols; it is when talking about a class of languages, which is not what you are doing here.
Sep 26 '20 at 13:31 comment That's right. Sequentially composing HVZK protocols (just like sequentially composing perfect ZK protocols). Is it still closed?
Sep 24 '20 at 17:22 comment What does that mean "HVZK is closed under sequential composition"? It does not make sense to me. "HVZK" is the class of all language that have honest-verifier zero-knowledge proof, but saying that a class of language is closed under sequential composition does not make sense - you can compose protocols, not languages. Are you asking if sequentially composing an HVZK protocol with himself still leads to an HVZK protocol? (if this is your question, the answer is yes)
Aug 29 '20 at 1:51 comment If Fiat-Shamir is used, can we argue in the way that: given two HVZK proof instances are convereted to NIZK using Fiat-Shamir, then the sequential composition of two NIZK is closed given ZK (with auxiliary input) is closed under sequential composition?
Aug 28 '20 at 13:31 history asked