Could you explain the difference between sigma protocol, Schorr protocol with examples. What is the advantage of using commit-and-prove zero knowledge proof over general zero knowledge proof?

  • 1
    $\begingroup$ As I know, Schnorr protocol is an instance of $\Sigma$ protocol which is a kind of interactive proofs. $\endgroup$
    – ming alex
    Nov 18, 2022 at 4:26
  • $\begingroup$ And the commitment scheme always owns hidding and binding properties, which could meet zero-knowledge and soundness requirements for zero knowledege proofs/arguments. Thus, when constructing a proof/argument system, we always take various commitment schemes into the system. $\endgroup$
    – ming alex
    Nov 18, 2022 at 4:33


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.