Post
Topic
Board Development & Technical Discussion
Re: Deterministic wallets
by
thanke
on 12/05/2013, 15:55:20 UTC
You can prove that you know c_par such that both (I_L,I_R)=hash(c_par, K_par, i) and K_i=I_L*K_par, without revealing c_par itself, via zero-knowledge computational integrity (PCP) proofs.

Really, you can zero-knowledge prove that you know a preimage of a hash?