Delayed-Input Witness Indistinguishable Proofs of Knowledge
摘要
In the previous chapter, we took an initial step toward bridging the gap between [57, 133]. Specifically, we introduced an alternative transformation for WI proofs of partial knowledge that enhances adaptivity at the cost of some generality. More precisely, we presented a technique that results in a (1, 2)-proof of partial knowledge, allowing the knowledge of one of the two instances to be deferred until the final round. In this chapter we show a protocol in which both instances can be deferred to the last round. In addition, we show how to guarantee that the soundess of the protocols also holds in the adaptive setting where the malicious prover picks the statement adaptively on the verifier message.