Expand description

The ciphertext-ciphertext equality proof instruction.

A ciphertext-ciphertext equality proof is defined with respect to two twisted ElGamal ciphertexts. The proof certifies that the two ciphertexts encrypt the same message. To generate the proof, a prover must provide the decryption key for the first ciphertext and the randomness used to generate the second ciphertext.

The first ciphertext associated with the proof is referred to as the “source” ciphertext. The second ciphertext associated with the proof is referred to as the “destination” ciphertext.

Structs§