I read that Schnorr protocol cannot be proved zero knowledge on that link:

Perfect zero knowledge for the Schnorr protocol? Could any one suggest alternative Zero knowledge proof protocol so a prover can prove to a verifier that he knows the private key corresponding to a particular public key?

  • $\begingroup$ Does the verifier sending a message encrypted with the prover's public key using Elgamal encryption and the prover being able to decrypt the message count? $\endgroup$
    – lovesh
    Feb 1 '19 at 9:13
  • $\begingroup$ Technically no, that would not be zero-knowledge. Heba Mohsen, are you asking for a modification of Schnorr protocol that makes it really zero-knowledge? $\endgroup$ Mar 15 '19 at 21:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.