Btw "Maybe the verifier is bad at tennis" should read "Maybe the prover is bad at tennis".
An unfortunate typo as that's the essential part of the analogy.
I somehow missed this back at the time of the frozen heart vulnerability announcement, but this blog post is *so* good at explaining the interaction of fiat-shamir with ZK proofs (at the very most basic level, e.g. just identification protocols), even using a very nice "tennis analogy" for the Fiat Shamir transform I'd never seen before.
https://blog.trailofbits.com/2021/02/19/serving-up-zero-knowledge-proofs/
#cryptography
Discussion
No replies yet.