w3c-ccg / data-minimization

WORK ITEM: Repo for Data Minimization and selective disclosure
https://w3c-ccg.github.io/data-minimization
Other
7 stars 5 forks source link

Proof of Correctness - Verification - Inverse of Zi and Ri #4

Closed gith1chris closed 5 years ago

gith1chris commented 5 years ago

The calculation at C.2.2.1.4 Prover Verifies the Issuer’s Proof of Correctness calculates 𝓩^ and 𝓑^𝓲 wrongly: Instead of
𝓩^ = 𝓩^𝓬.. 𝓑^𝓲 = 𝓑..

it should be 𝓩^ = 𝓩inv^𝓬.. 𝓑^𝓲 = 𝓑inv^i

because the inverse of z and Ri is used in the code, which is for a sound equation: https://github.com/hyperledger/indy-crypto/blob/master/libindy-crypto/src/cl/prover.rs :[293,308]