Class DisjunctiveChaumPedersenProofKnownNonce

Static create

• create(ciphertext: ElGamalCiphertext, plaintext: number, nonce: ElementModQ, publicKey: ElGamalPublicKey | ElGamalKeypair, seed: ElementModQ, qbar: ElementModQ): DisjunctiveChaumPedersenProofKnownNonce

• Produces a proof that a given ElGamal encryption corresponds to either zero or one. This requires the prover to know the nonce (the r behind the g^r).

  Parameters

  • ciphertext: ElGamalCiphertext

    The ElGamal ciphertext we're proving about

  • plaintext: number

    The actual plaintext constant value used to make the ElGamal ciphertext (L in the spec)

  • nonce: ElementModQ

    The aggregate nonce used creating the ElGamal ciphertext (r in the spec)

  • publicKey: ElGamalPublicKey | ElGamalKeypair

    The ElGamal public key for the election

  • seed: ElementModQ

    Used to generate other random values here

  • qbar: ElementModQ

    The election extended base hash (Q')

  Returns DisjunctiveChaumPedersenProofKnownNonce