next up previous
Next: On Yao's XOR-Lemma Up: The First 1.5 Years Previous: A Combinatorial Consistency Lemma

Honest Verifier vs Dishonest Verifier in Public Coin Zero-Knowledge Proofs

The main result in this paper is a transformation of public-coin constant-round protocols that are zero-knowledge with respect to the honest verifier into protocols that are zero-knowledge in the general sense. The core of the transformation is a simple random selection protocol, which is based on hashing functions (rather than on a multi-round ``interactive hashing sub-protocol'').


Comments: Authored by I. Damgard, O. Goldreich, T. Okamoto and A. Wigderson. Appeared in



Oded Goldreich
2003-07-30