Knowledge proof

Abstract

At a node of a blockchain network: obtaining a first transaction which including runnable code, including reference data for evaluating a challenge defined based on a joint r-value r joint; receiving one or more second transactions including information comprising an r-part r i and s-part s i of each of a pair of ECDSA signatures (i = 1, 2), each signing part of one of the one or more second transactions based on a respective first private key V i corresponding to a respective first public key P i; and running the code. The code verifies whether the challenge is met based on the reference data and the r- parts r i . The challenge comprises a criterion that: R 1 + R 2 = (Lambda 2 - r joint ) mod p, where r joint = [R joint ]x, R joint = R 1 + R 2 , p is a prime modulus, (Formula (I)) mod p, R i = k i . G, x i = [R i ]x, Y i = [R i ]y, k i is an ephemeral key, and G is an elliptic curve generator point.

Description

technical field [0001] The present disclosure relates to a proof of knowledge implemented via a set of transactions for recording in a blockchain. Background technique [0002] Blockchain refers to a form of distributed data structure in which a copy of the blockchain is maintained at each of multiple nodes in a peer-to-peer (P2P) network. A blockchain consists of a series of data blocks, where each block includes one or more transactions. Each transaction can refer back to previous transactions in the sequence. Transactions can be included in new blocks by committing to the network. The process of creating a new block is called "mining," and it involves each of multiple mining nodes competing to perform "proof-of-work," solving a cryptographic puzzle based on the pool of pending transactions waiting to be included in a block. [0003] Transactions in the blockchain are often used to transfer digital assets, that is, data used as a store of value. But it is also possible...

AI Technical Summary

Problems solved by technology

[0010] The problem with traditional hashing puzzles alone is that unscrupulous miners or other nodes can 2 d is observed in the unlocking script, and then the Tx 2 Create and mine (or publish) your own version, in pays itself in the output of Tx instead of paying 2 The intended recipient (eg, Bob) in

The signature part usually includes the outputs of the transaction, so these outputs cannot be changed without verifying that the signature is invalid and therefore the transaction is invalid

Images