Questions tagged [interactive-proofs]
The interactive-proofs tag has no usage guidance.
4
questions
4
votes
2
answers
208
views
Rigorous Proof on Malicious Zero-Knowledge Property of Schnorr Protocol
Let us recall the Schnorr Protocol, following Chris Peikert's excellent Notes on the Theory of Cryptography.
Protocol. Let $G=\langle g \rangle$ be a cyclic group of order $q$. We consider an ...
- 246
3
votes
1
answer
445
views
The significance of rewinding a simulation in an ZK interactive proof
I'm reading Matthew Green's blog post on ZK Interactive Proofs
I don't understand the part where he explains how using a time machine shows that the prover is leaking zero information
Specifically, ...
- 2,262
2
votes
2
answers
465
views
How to calculate soundness error of a sigma protocol?
How do I calculate the soundness error of a sigma protocol, such as Schnorr's interactive protocol for knowledge of a discrete logarithm?
0
votes
1
answer
76
views
Sumcheck Protocol: How to represent a matrix as an MLE which takes row & column numbers as parameters?
This is from Justin Thaler's book - Proofs, Arguments & Zero Knowledge
Page 43
For it to make sense to talk about multilinear extensions, we need to view the adjacency matrix $A$ not as a matrix, ...
- 2,262