2
votes
Is the protocol perfect zero knowledge?
Zero-knowledge proofs do not in general compose in parallel. See this paper by Feige and Shamir for a (contrived) counterexample. Beyond this counterexample, there are several constraints to actually ...
- 1,010
Only top scored, non community-wiki answers of a minimum length are eligible