Exams solutions

Exams solutions

student (guest) 01 Feb 2018 15:57

Nir, can you please upload solution to the givens exams?

Re: Exams solutions

nbitansky 01 Feb 2018 21:29

I'm afraid it's too late to ask for that now.

student (guest) 01 Feb 2018 17:20

and regarding exam 2017, should we ignore both questions about "CCA1", "CCA2",
or to answer the question only under our definition of CCA?

nbitansky 01 Feb 2018 21:30

The definition of CCA from hw6 coincides with CCA2.
I won't ask about CCA in the exam though.

Mr. Exam (guest) 03 Feb 2018 08:00

Did anyone manage to solve the following and can share their answers?
2014b: 2.a
2014b: 3.

Nathan (guest) 03 Feb 2018 09:28

2014b 3: If the prover sends the verifier an encryption of the witness using some PKE scheme, it certainly isn't a zero-knowledge protocol, but the randomness of V* can be easily simulated using Gen, and the transcript can also be easily simulated because of the security of the PKE scheme.

Omer Benami (guest) 03 Feb 2018 12:05

2014b 2a: I think it's the same construction as HW4 question 1b (the bonus question)