Score:1

Is there a zero knowledge proof of knowledge of a Waters sigature?

it flag

I am looking for a ZK PoK of a digital signature. I have seen constructions that work for ElGamal signatures (see this older paper), but need to work with Waters signatures, as described here.

Has anyone seen a construction that could work in this case?

ming alex avatar
in flag
Yes, of course, you can build a ZK proof/argument of knowledge of the Waters signature by Fiat-Shamir heuristic or [Groth-Sahai 07](https://eprint.iacr.org/2007/155.pdf) proof method. The statement of this ZK proof/argument is "the ciphertext $c$ contains a Water signature $\sigma$ on $m$.". And the related witnesses are the signature $\sigma$ and your secret key $\alpha$.
it flag
Many thanks @mingalex - I am finally learning the proper appreciation for Groth-Sahai. Do you happen to be aware of any software libraries that support the construction of proofs in their framework?
ming alex avatar
in flag
There was an [implementation](https://github.com/gijsvl/groth-sahai) of the Groth-Sahai NIZK. You can launch it directly without installing PBC lib, if you do not want to use the type D&G pairing.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.