A Digital Cash Protocol Based on Additive Zero Knowledge

摘要

In this paper, we introduce the concept of Additive Non-Interactive Zero Knowledge (NIZK). We extend the notion of NIZK proofs to include the prover's identity as part of the theorem being proved. An additive proof allows a verifier to construct a new proof of knowledge using the information from an old proof. Intuitively, an additive proof is a proof of knowledge of knowledge. As an application of this concept, we propose a digital cash scheme with transferable coins.