Professional Documents
Culture Documents
ZKP - Day - 1 - Session - 1 Copy 3
ZKP - Day - 1 - Session - 1 Copy 3
Hridam Basu
Plan Ahead
Proofs
Interactive Proofs
Zero-Knowledge Proofs
2 = 1mod 5
4
Proof?
Proof?
Too Complicated?
“A Proof“Type
is whatever
a quoteconvinces
here.” me.”
– Shimon Even
–Johnny Appleseed
Statement, Witness,
Relation
Proofs demonstrate that some statement is valid
Let x : a 2 − 3a +2 = (a − 1)(a − 2)
–Johnny Appleseed
One-Way Functions are those that are easy to compute
but hard to invert. Eg: Hash function, Discrete Log.,etc.
Simulator
On a high level, ZK property is proved (,ie, there is no
extra information leakage) with the help of a polynomial-
time simulator algorithm
Special - proof_of_knowledge
Commitment Scheme
Secure Lock Box containing a
secret with a key
Commit X
Phase Sender Receiver
s
yes/no
Properties of Commitment
Schemes
Hiding - commitment hides the secret value that is being
committed to
Com(m2 ;r2 ) = g h m2 r2
Com(m1 + m2 ;r1 + r2 )
m1 +m2 r1 +r2
=g h
=g h g h
m1 r1 m2 r2