2

Are the digital signatures used in cryptocurrencies such as Bitcoin a type of zero-knowledge proof?

knaccc
  • 4,732
  • 1
  • 16
  • 30
CHONG ZHAO XIAN
  • 21
  • 2
  • The aim of digital signature verification is to verify that the signature is created with the corresponding private key of the public key. If you ask, who has it, then you can play the game, challenge a message and ask them to sign, check, 1/2 probability, then ask again,... so yes. – kelalaka Sep 26 '22 at 18:33
  • I've modified your question to make it more precise. Please check. – kelalaka Sep 26 '22 at 19:16
  • Could someone write a good educative answer to this? – kelalaka Sep 26 '22 at 21:11
  • 1
    I'm now wondering whether ECDSA signatures would be considered as having "computational indistinguishability" for the purposes of the zero-knowledge simulator test, given that the x-coordinate of the EC point commitment is a field element and not a scalar that is uniformly randomly distributed between zero and the group size of the base point. – knaccc Sep 27 '22 at 01:44
  • 1
    According to https://crypto.stackexchange.com/questions/35177/is-using-digital-signatures-to-prove-identity-a-zero-knowledge-proof?rq=1 , the answer is no. – vince.h Sep 30 '22 at 03:59

0 Answers0