L13-PALLADIUM Datasheet (ETC) - Palladium/ Zero Knowledge

L13-PALLADIUM, Palladium/ Zero Knowledge

6.857 Computer and Network Security October 22, 2002 Lecture Notes 13 : Palladium, Zero Knowledge Lecturer: Ron Rivest Scribe: Baratz/Gavacs/Sen/Sudan [These are the initial scribe notes.

The ﬁnal version will appear with updated ﬁgures.

Namely, the ﬁgures will have larger fonts.] 1 Outline - Palladium discussion - Zero Knowledge Proofs 2 Palladium discussion Prof.

Rivest: What did people like / dislike about Palladium? Student: I think it’s interesting to think about the various other o

L13-PALLADIUM Features

* b ∈R {0, 1}, sends b to Prover - Prover: sends l = k + bx mod q - Veriﬁer: computes u × y b = g l mod p Note that the Prover can always succeed in each round with probability 1/2, by guessing b ﬁrst, then setting u = g l /y b . This protocol is sound a