New answers tagged

0 votes

cryptographic assumptions with bilinear pairings

I think that both statements are untrue. If the prover is furnished by a third party (who does not need to know $\alpha$) with $R=g^r$ and $S=g^{\alpha r}$) but not $\alpha$, then they can pick any $x$...
Daniel S's user avatar
  • 22.9k

Top 50 recent answers are included