|
|
|
@ -375,7 +375,7 @@ process:
|
|
|
|
|
4. Bob now knows the scalars _s_ and _e_, but not _x_ or _k_. However,
|
|
|
|
|
Bob does know _xG_ and _kG_, and he can compute for himself _sG_ and
|
|
|
|
|
_exG_. That means he can check the equality of a scaled-up version of
|
|
|
|
|
the operation Alice performed: _sG_ == _kG_ + _exG_. If that is equal,
|
|
|
|
|
the operation Alice performed: _sG_ == [.keep-together]#_kG_ + _exG_.# If that is equal,
|
|
|
|
|
then Bob can be sure that Alice knew _x_ when she generated _s_.
|
|
|
|
|
|
|
|
|
|
.Schnorr Identity Protocol with Integers Instead of Points
|
|
|
|
|