Questions tagged [sigma]

I want to know the state of the art result for proving knowledge of graph isomorphism. As described here, the classical Goldreich-Micali-Wigderson (GMW) protocol is a $\Sigma$-protocol with soundness error $\frac{1}{2}$, so it requires repetition.…

Given a message $m$, how can I prove that $m$ lies between 0 and 31 without revealing the message using a Sigma protocol? The message is encrypted as: $$c = a^{\beta} \cdot g^m ,$$ where: $a$ is the public key of the receiver, $\beta$ is the secret…

In a Sigma-protocol, the steps are (1) commitment, (2) challenge, and (3) response. In general, the prover has a statement and witness that they can use to compute the commitment step. But in some cases (like Schnorr or equality of two discrete…