Module short_group_sig::weak_bb_sig_pok_kv

Proofs of knowledge of weak-BB signature with keyed-verification, i.e. the verifier needs to know the secret key to verify the proof. g1 is generator of group G1, secret key = x, message = m, signature = A = g1 * 1/(x + m)

1. Prover chooses random r from Z_p.
2. Prover creates A' = A * r and A_bar = g1 * r - A' * m. Note that A_bar = A' * x
3. Prover creates proof of knowledge pi, of r and m in A_bar and sends pi, A', A_bar to the verifier.
4. Verifier checks if A_bar = A' * x and then verifies proof pi

Structs

• PoKOfSignatureG1KV
  Proof of knowledge of weak-BB signature in the keyed-verification model
• PoKOfSignatureG1KVProtocol
  Protocol to prove knowledge of weak-BB signature in the keyed-verification model