Polytopes in the Fiat-Shamir with Aborts Paradigm

ePrint Report: Polytopes in the Fiat-Shamir with Aborts Paradigm

Henry Bambury, Hugo Beguinet, Thomas Ricosset, Eric Sageloli

The Fiat-Shamir with Aborts paradigm (FSwA) uses rejection sampling to remove a secret’s dependency on a given source distribution. Recent results revealed that unlike the uniform distribution in the hypercube, both the continuous Gaussian and the uniform distribution within the hypersphere minimise the rejection rate and the size of the proof of knowledge. However, in practice both these distributions suffer from the complexity …

continuous dependency distribution eprint report fiat paradigm remove report results secret thomas