E Ben-Sasson,
A Chiesa,
M Green… - … IEEE Symposium on …, 2015 - ieeexplore.ieee.org
… equals C(α) · G for a random α; and (2) zero knowledge: if at least one party is honest and V
(tr)=1, tr … Virza, “Scalable zero knowledge via cycles of elliptic curves,” in CRYPTO ’14, 2014, …