Security, Zero Knowledge Proofs, Snark, Cryptography, Research.
exists a simulator that can create conversations with the same distribution as conversations between the prover and verifier. We stress that Schnorr’s protocol (as specified above) is NOT zero-knowledge. The reason lies in the inability to construct a simulator for all verifiers: The simulation