The protocol: High level view
Each verifier registers in the public file a public-key C for a trapdoor commitment scheme.
The protocol consists of two ìsubroutinesî:
- V proves to P knowledge of the trapdoor for C
- P proves to V that x in L using a standard four-round proof, where P commmits using the trapdoor commitment C, and V commits to his challenges initially using a standard perfectly binding commitment scheme c.