Prover | Verifier |
---|---|
g= , p= (must be prime) | |
Secret w =
y = g^w mod p = Random x = t = g^x mod p = |
|
Random c = | |
r = x - c * w = |
g^r mod p= y^c mod p= v = g^r.y^c mod p = |