A general transformation:
Define a class of ìadmissible protocolsî. Essentially, these are protocols where:
- V commits to its messages in the first round
- P ignores messages that are not properly decommitted.
Transform protocol as above
If the original protocol is admissible and cZK (cWI) then the transformed protocol is rZK (rWI).