https://www.zkdocs.com/Recent content in Introduction on ZKDocsHugoen-ushttps://www.zkdocs.com/docs/zkdocs/notation/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/notation/Common notation and definitions used in the documentation.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/schnorr/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/schnorr/The zero-knowledge proof for a discrete-logarithm in a prime modulo.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/schnorr-variants/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/schnorr-variants/Common variants of Schnorr’s protocol.https://www.zkdocs.com/docs/zkdocs/protocol-primitives/fiat-shamir/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/protocol-primitives/fiat-shamir/Here, we describe what the Fiat-Shamir transformation is, its goals, its pitfalls, and its different versions.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/square-freeness/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/square-freeness/Proves that a number is square-free.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/two-prime-divisors/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/two-prime-divisors/Proves that a number has two prime divisors.https://www.zkdocs.com/docs/zkdocs/protocol-primitives/nums/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/protocol-primitives/nums/Generic, honest, and deterministic method to sample elements.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/girault-identification/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/girault-identification/A statistical zero-knowledge proof for discrete-logarithm in a composite modulo.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/product-of-two-primes/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/product-of-two-primes/Proves that a number is the product of two distinct primes: in parallel, run the square-freeness proof together with the two-prime-divisors proof.https://www.zkdocs.com/docs/zkdocs/security-of-zkps/when-to-use-hvzk/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/security-of-zkps/when-to-use-hvzk/Potential attacks when honest verifier zero-knowledge proofs are used in the context of a malicious verifier.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/paillier_blum_modulus/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/product-primes/paillier_blum_modulus/An efficient proof that shows a number is the product of two primes congruent with 3 mod 4.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/short-factoring-proofs/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/short-factoring-proofs/Proof of knowledge of the factorization of an integer.https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/ipa/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/zero-knowledge-protocols/ipa/Proving the knowledge of vectors for a public inner producthttps://www.zkdocs.com/docs/zkdocs/commitments/pedersen/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/commitments/pedersen/An overview of the Pedersen commitment scheme and its applicationshttps://www.zkdocs.com/docs/zkdocs/protocol-primitives/shamir/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/protocol-primitives/shamir/An overview of Shamir’s Secret Sharing scheme and potential security pitfalls.https://www.zkdocs.com/docs/zkdocs/protocol-primitives/verifiable-secret-sharing/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/protocol-primitives/verifiable-secret-sharing/A verifiable version of Shamir’s secret sharing scheme due to Feldman.https://www.zkdocs.com/docs/zkdocs/commitments/kzg_polynomial_commitment/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/commitments/kzg_polynomial_commitment/Kate et. al’s Pairing-Based Polynomial Commitmentshttps://www.zkdocs.com/docs/zkdocs/commitments/ipa-pcs/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/commitments/ipa-pcs/An overview of the Inner Product Argument polynomial commitment schemehttps://www.zkdocs.com/docs/zkdocs/protocol-primitives/alt-shamir/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/protocol-primitives/alt-shamir/Secret sharing alternatives which do not hide the secret in the constant term of the polynomial.https://www.zkdocs.com/docs/zkdocs/bibliography/Mon, 01 Jan 0001 00:00:00 +0000https://www.zkdocs.com/docs/zkdocs/bibliography/All references