Disclaimer: This page refers to an external person. It only lists all the interactions between this person and the Crypto Group. Validity or accuracy of the following information is thus not guaranteed in any way.

## Seminars given

**
***March 15, 2005* - Zero-Knowledge Identification with Multivariate Quadratic Equations

by Christopher Wolf

Abstract: | Generally speaking, in an authentication scheme, a prover P wants to convince a verifier V of its identity. For a zero-knowledge protocol, we have the additional constrain that the prover does not leak any useful information to the user in the whole process. The last property makes Zero-Knowledge schemes a very interesting choice for authentication problems, e.g., in the military context ("is this my tank or a tank of
the enemy?"). In this talk, we show a concrete implementation of an zero-knowledge scheme denoted the MQ^*-IP scheme. It is based on the intractability assumption of Multivariate Quadratic equations (MQ) and the Isomorphism of Polynomials problem (IP). Both are believed to be hard and their security has been extensively studied in other contexts. In contrast to
many other Zero-Knowledge schemes based on NP-complete problems MQ^*-IP allows identity-based keys. This is an advantage in practical settings, as no public key infrastructure needs to be installed. |