Witness-indistinguishable proof

A witness-indistinguishable proof (WIP) is a variant of a zero-knowledge proof for languages in NP. In a typical zero-knowledge proof of a statement, the prover will use a witness for the statement as input to the protocol, and the verifier will learn nothing other than the truth of the statement. In a WIP, this zero-knowledge condition is weakened, and the only guarantee is that the verifier will not be able to distinguish between provers that use different witnesses. In particular, the protocol may leak information about the set of all witnesses, or even leak the witness that was used when there is only one possible witness.

Witness-indistinguishable proof systems were first introduced by Feige and Shamir.[1] Unlike zero-knowledge proofs, they remain secure when multiple proofs are being performed concurrently.

References

  1. ↑ Uriel Feige, Adi Shamir. Witness Indistinguishable and Witness Hiding Protocols. In Proceedings of 22nd STOC, p.416-426. ACM Press, 1990.


This article is issued from Wikipedia - version of the 1/1/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.