# Zero-knowledge proof with only a ciphertext

Suppose there is a plaintext p, which is encrypted with a symmetric cipher using a key k, resulting in a ciphertext c. Bob knows both c and k, but Alice knows only c. Is there any protocol by which Alice can be certain (maybe with some probability) that Bob indeed does know p, without revealing to her p itself?

Also, it be great to not have to have any third-party involved.

• Not sure if this is possible, but I found this question which is somehow related (here Alice knows $p$). – AleksanderRas Apr 9 at 9:38

• Thank you. Do you know where the following statement: every statement in NP can be proven in zero-knowledge was proved? – Evgeniy Gryaznov Apr 9 at 14:05