# Given A, B, G, H prove the I know x s.t. $A=xG$ and $B=xH$

Given A, B, G, H .How would I prove that I know x such that $$A=xG$$ and $$B=xH$$

• See Chaum–Pedersen, or Fujisaki–Okamoto if the group has composite order? Jun 12 '19 at 16:02

There is a standard $$\Sigma$$-protocol for proving knowledge of a witness showing that $$(G,H,A,B)$$ is a DDH-tuple, assuming a group of prime order $$p$$:
• The prover picks a random exponent $$r \in \mathbb{Z}_p$$ and sends $$(R,S) = (rG, rH)$$.
• The verifier sends a random challenge $$e$$ from $$\mathbb{Z}_p$$.
• The prover computes and send $$d = e\cdot x + r$$.
• The verifier accepts the proof if and only if $$eA+R = dG$$ and $$eB+S=dH$$.