Skip to main content

New answers tagged

1 vote

Does Schnorr identification protocol using commitment scheme?

The first message in Schnorr's protocol is not a "commitment scheme" primitive -- neither in syntax or function. It is a "commitment" only in the informal sense of the word. The ...
Mikero's user avatar
  • 13.5k
0 votes

Does Schnorr identification protocol using commitment scheme?

It is a commit scheme if you think of committing to the Prover itself (as mentioned in Wiki's Schnorr protocol). So, we can use m=0 to represent Prover itself. Then this actually becomes Pederson ...
Yi_'s user avatar
  • 1

Top 50 recent answers are included