New answers tagged


How do you prove the soundness property of the ZKP from the paper without witness extraction (which seems not possible)? It is perfectly possible and you've almost done it already! You are right that unknown order groups make your life very complicated when you want to build proofs of knowledge - we know results in this direction (the one you cite) -- ...

Top 50 recent answers are included