**R to @adam3us: verifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(r1*G+c1*A, r1*G+c2*B) and that works because**
verifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(r1*G+c1*A, r1*G+c2*B) and that works because**R to @adam3us: verifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(…
https://nitter.net/adam3us/status/1605984020507947008#m
Adam Back / @adam3us /
npub1wq…8rnrp
2022-12-22 17:50:02
Author Public Key
npub1wqlzdd8chs862luemq2ahd6mppsp9txzflz400h6xy844gydrzvq08rnrpPublished at
2022-12-22 17:50:02Event JSON
{
"id": "fc0e1d833baef5937761b8d1ce4ff68760e1a4d5b853b5b6e5c607c80340505e",
"pubkey": "703e26b4f8bc0fa57f99d815dbb75b086012acc24fc557befa310f5aa08d1898",
"created_at": 1671731402,
"kind": 1,
"tags": [],
"content": "**R to @adam3us: verifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(r1*G+c1*A, r1*G+c2*B) and that works because**\n\nverifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(r1*G+c1*A, r1*G+c2*B) and that works because**R to @adam3us: verifier can see that c=H(r*G+c*Q) but they don't learn x the secret (private key). now there's a generalisation of that for an OR proof where we know the discrete log of A *OR* discrete log of B which is relatively simple. c1+c2=H(…\n\nhttps://nitter.net/adam3us/status/1605984020507947008#m",
"sig": "7e07b19be4f6b3ec88b5666bd318efd01553f2c6a28d0eba59432c6ad9b5284ac067a7442416102a8e87307be3b355c8ae4d5b14cdc74a2b3ac8ff296f938421"
}