In the previous chapter, we took an initial step toward bridging the gap between [57, 133]. Specifically, we introduced an alternative transformation for WI proofs of partial knowledge that enhances adaptivity at the cost of some generality. More precisely, we presented a technique that results in a (1, 2)-proof of partial knowledge, allowing the knowledge of one of the two instances to be deferred until the final round. In this chapter we show a protocol in which both instances can be deferred to the last round. In addition, we show how to guarantee that the soundess of the protocols also holds in the adaptive setting where the malicious prover picks the statement adaptively on the verifier message.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Delayed-Input Witness Indistinguishable Proofs of Knowledge

  • Michele Ciampi,
  • Luisa Siniscalchi

摘要

In the previous chapter, we took an initial step toward bridging the gap between [57, 133]. Specifically, we introduced an alternative transformation for WI proofs of partial knowledge that enhances adaptivity at the cost of some generality. More precisely, we presented a technique that results in a (1, 2)-proof of partial knowledge, allowing the knowledge of one of the two instances to be deferred until the final round. In this chapter we show a protocol in which both instances can be deferred to the last round. In addition, we show how to guarantee that the soundess of the protocols also holds in the adaptive setting where the malicious prover picks the statement adaptively on the verifier message.