I read that Schnorr protocol cannot be proved zero knowledge on that link:

Perfect zero knowledge for the Schnorr protocol? Could any one suggest alternative Zero knowledge proof protocol so a prover can prove to a verifier that he knows the private key corresponding to a particular public key?

  • $\begingroup$ Does the verifier sending a message encrypted with the prover's public key using Elgamal encryption and the prover being able to decrypt the message count? $\endgroup$
    – lovesh
    Commented Feb 1, 2019 at 9:13
  • $\begingroup$ Technically no, that would not be zero-knowledge. Heba Mohsen, are you asking for a modification of Schnorr protocol that makes it really zero-knowledge? $\endgroup$ Commented Mar 15, 2019 at 21:34


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.