Is there a way to prove that two ElGamal ciphertexts encrypt the same message with different public keys without knowing the private keys?

The prover is the producer of both ciphertexts.

  • 2
    $\begingroup$ Is this homework? Also, are those two ciphertexts encrypted to the same public key? Are you asking whether the holder of the private key(s) can generate a zero-knowledge proof, or whether someone with only the public keys can deduce it? $\endgroup$
    – poncho
    Mar 24, 2020 at 12:20
  • $\begingroup$ I edited the question to answer your questions. $\endgroup$
    – Fiono
    Mar 24, 2020 at 12:25


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.