New answers tagged zero-knowledge-proofs
0
votes
Why the full r-torsion group contains r^2 many elements and consists of r+1 subgroups
Only if $r$ is prime.
Let $E[r] = \langle P,Q \rangle$ be the $r$-torsion subgroup. Its cyclic subgroup is defined by a generator of the form $[a]P + [b]Q$, but up to a (non-zero) scalar multiple: ...
- 3,057
0
votes
Where can I find 2 of the steps/proofs described in Dan Boneh's video on PLONK in the PLONK Paper? The 2 don't seem to match
In the talk, Boneh shows how to obtain an "arithmetization" from an arithmetic circuit, which represents a specific computation. In the paper, Gabizon does provide a proof system, given a ...
0
votes
which zero knowledge proof technique is suitable for identity verification system?
There are many instances of implementing ZKP for anonymous authentication, such as $\Sigma$ protocol(interactive ZKP), classical Fiat-Shamir transformer by assuming random oracle and Groth-Sahai ...
- 368
0
votes
What do we know about the relationship between IP, ZKP?
unconditionally IP = PSPACE [Because of shamir]
Now NP contianed in ZK (if OWF exist). This is essential since to prove the zero knowledge aspect of the protocol you need commitment schemes that imply ...
- 13
Top 50 recent answers are included