zkdec

type Commitment struct {
	// S = sʸ tᵘ
	S *safenum.Nat
	// T = sᵃ tᵛ
	T *safenum.Nat
	// A = Enc₀(α; r)
	A *paillier.Ciphertext
	// Gamma = α (mod q)
	Gamma curve.Scalar
}

type Private struct {
	// Y = y
	Y *safenum.Int

	// Rho = ρ
	Rho *safenum.Nat
}

type Proof struct {
	*Commitment
	// Z1 = α + e•y
	Z1 *safenum.Int
	// Z2 = ν + e•μ
	Z2 *safenum.Int
	// W  = r ρ ᵉ (mod N₀)
	W *safenum.Nat
	// contains filtered or unexported fields
}

type Public struct {
	// C = Enc₀(y;ρ)
	C *paillier.Ciphertext

	// X = y (mod q)
	X curve.Scalar

	// Prover = N₀
	Prover *paillier.PublicKey
	Aux    *pedersen.Parameters
}