2022 Developer Survey is open! Take survey.

# Tag Info

Accepted

### Schnorr based ZK scheme

Consider an equivalent variant of a regular Schnorr signature that signs a message $m$. I'm assuming $s$ is a sufficiently high-entropy secret, and so that therefore $S$ cannot be brute forced. The ...
• 2,613

### Is Schnorr's digital signature a non-interactive zero-knowledge proof?

The proof is better done other way round – from NIZK to Schnorr Digital signature. It goes like this. Fiat-Shamir NIZK Heuristic requires the Prover to use a hash of transcript/timestamp/last-message ...
1 vote

### Σ-protocol that proves an even number was committed using Pedersen commitment scheme

A standard Pedersen commitment range proof will demonstrate that $y$ is constructed from the addition of a series of powers of 2. All you have to do is slightly modify the range proof so that you do ...
• 2,613

### Range proof for elgamal ciphertext

If your method of mapping your value $b$ to a group element is $g^b$, then creating a range proof for an El Gamal encryption is exactly the same as creating a range proof for a Pedersen commitment. ...
• 2,613
The proof doesn't work (even if you fix it up by having the prover initially send $R_1, R_2$, rather than $q_1, q_2$, which you likely intended); the holder of the private key can generate a valid ...