International Association
for Cryptologic Research

Even though Zero-knowledge has existed for more than 30

years, few generic constructions for Zero-knowledge exist. In this paper

we present a new kind of commitment scheme on which we build a novel

and efficient Zero-knowledge protocol for circuit satisfiability.