… Concurrent executions of a zero-knowledge protocol by a single prover (with one or more …
be zero-knowledge in toto. In this article, we study the problem of maintaining zero-knowledge …

… of zero-knowledge. In essence, an rZK protocol is one that remains zero knowledge even if
an … In this paper we extend the classical notion of zero-knowledge by introducing the notion of …

… prover and verifier ina zero-knowledge proof if they share beforehand a short random
string. Without any assumption, it is proven that noninteractive zero-knowledge proofs exist for …

… bit of information) to zero knowledge proofs of knowledge (which … parallel executions of zero
knowledge protocols, define a … (which is not known to be zero knowledge) is secure since it …

… A zero-knowledge proof system of … a zero-knowledge proof system of membership where
the prover convinces the verifier only of the veridicity of the statement. Zero-knowledge proofs …

… The present article contains new undeniable signature protocols, and these are the first
that are zero-knowledge. … Again two things are proved: Theorem 3: The protocol of Figure …

… Our new primitive immediately extends to providing zero-knowledge “databases.” … Since
the notion of a zero-knowledge set is essentially a special case of that of a zero-knowledge EDB…

… We present a simple zero-knowledge proof of knowledge protocol of which many protocols
in the literature are instantiations. These include Schnorr’s protocol for proving knowledge of …

… The next assumption is used only for our perfect zero knowledge protocols. The same
assumption is used in [6] in the construction of their perfect zero knowledge protocols. …

… will be correspondingly defined as statistical zero knowledge and perfect zero knowledge.
On the other hand, if soundness holds for any probabilistic polynomial time prover, that is, …