Why are ZK proofs important?
ZK proofs to design passwords so even snoops data still can’t tell
Also can sort of enforce “good behavior”
Protocol with P1, P2
Has some x1 and x2
Some protocol to compute f(x1, x2)
Protocol:
Player 1 controls the coin, but doesn’t know the result
Player 2 knows the result, but doesn’t control the coin
Exact protocol from before
P1 generates b commits
P2 generates r2 and sends
P1 decommits b
Common coin is xor b r2