New answers tagged zero-knowledge-proofs
0
votes
Why the full r-torsion group contains r^2 many elements and consists of r+1 subgroups
Only if $r$ is prime.
Let $E[r] = \langle P,Q \rangle$ be the $r$-torsion subgroup. Its cyclic subgroup is defined by a generator of the form $[a]P + [b]Q$, but up to a (non-zero) scalar multiple: ...
0
votes
Where can I find 2 of the steps/proofs described in Dan Boneh's video on PLONK in the PLONK Paper? The 2 don't seem to match
In the talk, Boneh shows how to obtain an "arithmetization" from an arithmetic circuit, which represents a specific computation. In the paper, Gabizon does provide a proof system, given a ...
0
votes
which zero knowledge proof technique is suitable for identity verification system?
There are many instances of implementing ZKP for anonymous authentication, such as $\Sigma$ protocol(interactive ZKP), classical Fiat-Shamir transformer by assuming random oracle and Groth-Sahai ...
0
votes
What do we know about the relationship between IP, ZKP?
unconditionally IP = PSPACE [Because of shamir]
Now NP contianed in ZK (if OWF exist). This is essential since to prove the zero knowledge aspect of the protocol you need commitment schemes that imply ...
Top 50 recent answers are included
Related Tags
zero-knowledge-proofs × 1019commitments × 83
snarks × 79
protocol-design × 56
public-key × 54
signature × 50
homomorphic-encryption × 49
hash × 47
fiat-shamir × 47
multiparty-computation × 42
discrete-logarithm × 40
encryption × 39
elliptic-curves × 37
elgamal-encryption × 36
provable-security × 34
authentication × 27
sigma-protocol × 27
verifiability × 26
schnorr-signature × 22
rsa × 21
cryptocurrency × 21
schnorr-identification × 20
zero-knowledge × 20
pairings × 19
paillier × 18