Interactive Proofs
and Zero-Knowledge
y
’àà
QR
n
Pick rand bit b
Check a
2
mod n = w•y
b
mod n