Re: [freehaven-dev] POKs for mix accountability transcript

[David Hopwood <hopwood@zetnet.co.uk>]

-----BEGIN PGP SIGNED MESSAGE-----

Michael J Freedman wrote:
> While we were discussion the mix accountability paper, I started
> mumbling about zero-knowledge proofs for the MIX transcripts.

This abstract looks interesting:

  Roger Fischlin <fischlin@haendel.mi.informatik.uni-frankfurt.de>
  "Fast Proof of Plaintext-Knowledge and Deniable Authentication Based on
   Chinese Remainder Theorem"
  http://eprint.iacr.org/1999/006/

  Abstract. We propose a fast and communication-efficient proof of
  plaintext-knowledge (PPTK) protocol based on the Chinese Remainder
  theorem. With a PPTK the receiver of a ciphertext verifies that the
  sender knows the corresponding cleartext in such a way that a dishonest
  sender or an eavesdropper does not learn anything about the plaintext
  except with sub-polynomial probability. ...

The paper has been withdrawn from the ePrint archive though; I don't
know why.

- -- 
David Hopwood <hopwood@zetnet.co.uk>

Home page & PGP public key: http://www.users.zetnet.co.uk/hopwood/
RSA 2048-bit; fingerprint 71 8E A6 23 0E D3 4C E5  0F 69 8C D4 FA 66 15 01
Nothing in this message is intended to be legally binding. If I revoke a
public key but refuse to specify why, it is because the private key has been
seized under the Regulation of Investigatory Powers Act; see www.fipr.org/rip


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQEVAwUBOlDrDjkCAxeYt5gVAQExhwf+LWFEU2RWl9JvLspD1P29BfPaEykpM24M
ClxnG7P84Va9bdjbqDqV2jnrqsJgJW6DsH12VVKX75Pkz1Irojnk0gzaGycW/80d
tKWD0vskrFKAv5hzB64O/uuR1ptxu3inteLLOxZZo9IrluvwuUljfh7gJXUKhloh
2c2Gz/iOXY5Spk2Bqwno4VsKps7DLk4eOI3k4eB6cXDp5JJTajGLFv6Hbqi4k657
EbYFuEotMP6QV3F2eaWBfu9xJU1czH9jV6WOK6EE4oTdOuFxYx+OWebmpQ09+be2
ZjCaiH4eW7PWqmMglqhjUe4pQ2FVWOx3QHG74vgF57b+V4A6wg4Ujw==
=f3lY
-----END PGP SIGNATURE-----