L13-PALLADIUM Datasheet - ETC

L13-PALLADIUM Palladium/ Zero Knowledge

6.857 Computer and Network Security October 22, 2002 Lecture Notes 13 : Palladium, Zero Knowledge Lecturer: Ron Rivest Scribe: Baratz/Gavacs/Sen/Sudan [These are the initial scribe notes. The ﬁnal version will appear with updated ﬁgures. Namely, the ﬁgures will have larger fonts.] 1 Outline - Palladium discussion - Zero Knowledge Proofs 2 Palladium discussion Prof. Rivest: What did people like / dislike about Palladium? Student: I think it’s interesting to think about the various other o.

L13-PALLADIUM Features

* b ∈R {0, 1}, sends b to Prover - Prover: sends l = k + bx mod q - Veriﬁer: computes u × y b = g l mod p Note that the Prover can always succeed in each round with probability 1/2, by guessing b ﬁrst, then setting u = g l /y b . This protocol is sound a

L13-PALLADIUM Datasheet (150.49 KB)