search

LFDT-Lockness / paillier-zk

Zero-knoledge proofs of some paillier cryptosystem properties for use in CGGMP21
Apache License 2.0
0 stars 1 forks source link

Missing inputs to Fiat-Shamir hash (again) #26

Closed jkatzDfns closed 1 year ago

jkatzDfns commented 1 year ago

In ring_pedersen_parameters lines 43-47, you need to include the initial commitment (the a_i’s) in the hash.

maurges commented 1 year ago

Moved to cggmp21 repo as the code is there