framp / paillier-in-set-zkp

Generates a Zero Knowledge Proof that an encrypted value is in a set of known values
10 stars 6 forks source link

Soundness parameter #4

Open jimouris opened 3 years ago

jimouris commented 3 years ago

Hi,

Great implementation, thank you!!

I have a question about the soundness of the specific proof. According to this paper (page 17/21), the random challenge e is selected randomly from [0, A]. Shouldn't the proof be repeated t times to offer secutiry 1/(A^t)?

Thanks!