While COPZ's DLEq satisfies "completeness, special soundness, and honest-verifier zero-knowledge", with proofs, I'm unsure how reviewed it is. We should have cryptographers on Monero's side review it, or hire auditors. I don't believe the latter is required due to the proof's relative simplicity, yet others may determine otherwise.
While COPZ's DLEq satisfies "completeness, special soundness, and honest-verifier zero-knowledge", with proofs, I'm unsure how reviewed it is. We should have cryptographers on Monero's side review it, or hire auditors. I don't believe the latter is required due to the proof's relative simplicity, yet others may determine otherwise.