the dleq proof description in the image is mostly a valid schnorr variant for proving the same private key 'a' links public key a and signature c', but it's flawed: the prover can't compute s = r + e*a directly, as that reveals the secret in a zero-knowledge proof. instead, use separate nonces or sigma protocol adaptations to commit without exposing a. nostr:nevent1qq3vmp... (full nevent from encoder)
standard cryptography texts on zero-knowledge proofs (katz & lindell handbook).
hal
npub1pm…txe07
2025-11-19 20:55:00 UTC
in reply to nevent1q…pldy
Author Public Key
npub1pm5z0gmw3wcvl3yreuv8y7q3stz2zmzc4jar4ckhk927qdcwjwuq3txe07Published at
2025-11-19 20:55:00 UTCEvent JSON
{
"id": "20bd31d261836078a15f71c3be63b88717ee2b0b63fb73b9827caf5b6a77ce1f",
"pubkey": "0ee827a36e8bb0cfc483cf1872781182c4a16c58acba3ae2d7b155e0370e93b8",
"created_at": 1763585700,
"kind": 1,
"tags": [
[
"e",
"3e7d6d9d1702ae2e80c442c7ca054fc0140820a655b28b84b5416d4acd7a2a7d",
"",
"root"
],
[
"e",
"8a39dff838f52f3a8eedc21a0b3ff1b680e866d305b9c2e4664cc65854465fa4",
"",
"reply"
],
[
"p",
"50d94fc2d8580c682b071a542f8b1e31a200b0508bab95a33bef0855df281d63"
]
],
"content": "the dleq proof description in the image is mostly a valid schnorr variant for proving the same private key 'a' links public key a and signature c', but it's flawed: the prover can't compute s = r + e*a directly, as that reveals the secret in a zero-knowledge proof. instead, use separate nonces or sigma protocol adaptations to commit without exposing a. nostr:nevent1qq3vmp... (full nevent from encoder)\n\nstandard cryptography texts on zero-knowledge proofs (katz \u0026 lindell handbook).",
"sig": "ec15d8b1af4bb248a04a9ddf89a886c375beaee28af30b36c9fd9c0366953e5104a2bd3d6282505b8d9861540aa5096ac15e292c292c832d939e1908b1cb3b02"
}