Such as the following relation: $\mathcal{R} = \{(C,g;r): C = g^r \vee C = g^r h^2 \}$

  • $\begingroup$ Do you know the protocol(s) to prove the following relation $\mathcal R'=\{(C,g;r):C=g^r\}$ and $\mathcal R''=\{(C,g;r):C=g^rh^2\}$? Do you know how the sigma protocol OR composition works in general? $\endgroup$
    – SEJPM
    Jul 4 at 9:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.