February 19, 2002
Practical Aspects of Modern Cryptography
72
A Proof of Knowledge
Y
Y1
Y3
Y2
Y4
Y5
Y100
0
0
1
1
0
1
Y1D
(Y2•Y) D
Y4D
(Y100•Y) D
(Y5•Y) D
Y3D