<?xml version="1.0" encoding="UTF-8"?><lom xmlns="http://ltsc.ieee.org/xsd/LOM" xmlns:lomfr="http://www.lom-fr.fr/xsd/LOMFR" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://ltsc.ieee.org/xsd/LOM http://www.lom-fr.fr/xsd/lomfrv1.0/std/lomfr.xsd">
<general>
<identifier>
<catalog>Canal-U_Ocms</catalog>
<entry>32987</entry>
</identifier>
<title><string language="fre"><![CDATA[5.5. Stern’s Zero-Knowledge Identification Scheme]]></string></title>
<language>ENG</language>
<description>
<string language="fre"><![CDATA[In this session, we are
going to have a look at Stern’s Zero-Knowledge Identification Scheme. So, what is a
Zero-Knowledge Identification Scheme? An identification scheme
allows a prover to prove his identity to a verifier. And the Zero-Knowledge
Protocol is an interactive protocol where one proves
the knowledge of something, without revealing any information
on this knowledge, on this element. So, Stern’s Identification
Scheme was invented in 1993 and security relies on the
syndrome decoding problem. Contrary to McEliece or
the CFS signature, it uses a random binary matrix which means
that there is no trap inside it. Like other
identification schemes, it can also be converted into a signature
scheme. The system parameters are a public binary matrix H
of size r * n and a weight w. Each user in the system
that wants to be able to prove his identity picks a secret
binary vector e of length n and weight w, which can be
seen as an error pattern, and computes the
syndrome of this vector e. This syndrome is published
and is a kind of a public key. The identification
protocol: the verifier knows the public key s and the prover
has to prove that he knows e such that s = H * e. And this has to be done without
leaving any information about e. The identification scheme
involves a prover and a verifier. The prover picks a
random vector y and a random permutation of the
elements from 1 to n, ?. Then, it computes three
commitments c0, c1, c2 which are hashes are different elements that
he knows, depending of ?, y and e. And he sends these commitments
to the verifier who stores them. Then, the verifier picks a
random value in 0, 1 or 2 and sends it to the prover. Depending on the value of b, the
answer of the prover will be different. If b = 0, the prover will
reveal elements that allow the verifier to verify
commitments c1 and c2. These elements are the
permutation ?(y) and the permutation of the error vector ?(e).]]></string></description>
<keyword><string language="fre"><![CDATA[algèbre linéaire]]></string></keyword><keyword><string language="fre"><![CDATA[chiffrement à clé publique]]></string></keyword><keyword><string language="fre"><![CDATA[cryptage des données]]></string></keyword><keyword><string language="fre"><![CDATA[cryptographie]]></string></keyword><keyword><string language="fre"><![CDATA[code correcteur]]></string></keyword><keyword><string language="fre"><![CDATA[algorithmes]]></string></keyword><keyword><string language="fre"><![CDATA[CFS]]></string></keyword><keyword><string language="fre"><![CDATA[Courtois-Finiasz-Sendrier]]></string></keyword>
<lomfr:documentType>
<lomfr:source>LOMFRv1.0</lomfr:source>
<lomfr:value>image en mouvement</lomfr:value>
</lomfr:documentType>
</general><lifeCycle>
<contribute>
<role>
<source>LOMv1.0</source>
<value>author</value>
</role>
<entity><![CDATA[BEGIN:VCARD
VERSION:3.0
CLASS:PUBLIC
REV:2021-07-06 18:03:09
FN:Irene MARQUEZ-CORBELLA
N:MARQUEZ-CORBELLA;Irene;;;
URL;TYPE=work:https://www.canal-u.tv/auteurs/marquez_corbella_irene
ROLE:author
TZ:+0200
END:VCARD
]]></entity>
<date><dateTime>2015-05-05</dateTime></date>
</contribute>
<contribute>
<role>
<source>LOMv1.0</source>
<value>author</value>
</role>
<entity><![CDATA[BEGIN:VCARD
VERSION:3.0
CLASS:PUBLIC
REV:2021-07-06 18:03:09
FN:Nicolas SENDRIER
N:SENDRIER;Nicolas;;;
URL;TYPE=work:https://www.canal-u.tv/auteurs/sendrier_nicolas
ROLE:author
TZ:+0200
END:VCARD
]]></entity>
<date><dateTime>2015-05-05</dateTime></date>
</contribute>
<contribute>
<role>
<source>LOMv1.0</source>
<value>author</value>
</role>
<entity><![CDATA[BEGIN:VCARD
VERSION:3.0
CLASS:PUBLIC
REV:2021-07-06 18:03:09
FN:Matthieu FINIASZ
N:FINIASZ;Matthieu;;;
URL;TYPE=work:https://www.canal-u.tv/auteurs/finiasz_matthieu
ROLE:author
TZ:+0200
END:VCARD
]]></entity>
<date><dateTime>2015-05-05</dateTime></date>
</contribute>
</lifeCycle>
<metaMetadata>
<metadataSchema>LOMv1.0</metadataSchema>
<metadataSchema>LOMFRv1.0</metadataSchema>
</metaMetadata>
<technical>
<format>video/mp4</format>
<location><![CDATA[https://www.canal-u.tv/video/inria/5_5_stern_s_zero_knowledge_identification_scheme.32987]]></location>
<location><![CDATA[https://streaming-canal-u.fmsh.fr/vod/media/canalu/videos/fuscia/5.5.stern.s.zero.knowledge.identification.scheme_32987/c015im.w5.s5.mov]]></location>
<size>195958001</size>
<duration><duration>PT0H7M12S</duration></duration>
</technical>
<educational>
<learningResourceType>
<source>LOMv1.0</source>
<value>lecture</value>
</learningResourceType>
<context>
<source>LOMv1.0</source>
<value>master</value>
</context>
<context>
<source>LOMv1.0</source>
<value>doctorat</value>
</context>
</educational>
<rights>
<cost>
<source>LOMv1.0</source>
<value>no</value>
</cost>
<copyrightAndOtherRestrictions>
<source>LOMv1.0</source>
<value>no</value>
</copyrightAndOtherRestrictions>
<description>
<string language="fre"><![CDATA[Droits réservés à l'éditeur et aux auteurs. 
Ces ressources de cours sont, sauf mention contraire, diffusées sous Licence Creative Commons. L’utilisateur doit mentionner le nom de l’auteur, il peut exploiter l’œuvre sauf dans un contexte commercial et il ne peut apporter de modifications à l’œuvre originale.]]></string>
</description>
</rights>
<relation>
<kind>
<source>LOMv1.0</source>
<value>ispartof</value>
</kind>
<resource>
<identifier>
<catalog>URI</catalog>
<entry>https://www.canal-u.tv/producteurs/inria/cours_en_ligne/code_based_cryptography/5_other_cryptographic_constructions_relying_on_coding_theory</entry>
</identifier>
<description>
<string language="fre"><![CDATA[5: Other cryptographic constructions relying on coding theory]]></string>
</description>
</resource>
</relation>
<classification>
<purpose>
<source>LOMv1.0</source>
<value>discipline</value>
</purpose>
<taxonPath>
<source>
<string language="fre"><![CDATA[Universités Numériques Thématiques 2009 http://www.universites-numeriques.fr]]></string>
</source>
<taxon>
<id/>
<entry>
<string language="fre"/>
</entry>
</taxon>
</taxonPath>
</classification>
<classification>
<purpose>
<source>LOMv1.0</source>
<value>discipline</value>
</purpose>
<taxonPath>
<source>
<string language="fre">CDD 22e éd.</string>
<string language="eng">DDC 22nd ed.</string>
</source>
<taxon>
<id>518</id>
<entry>
<string language="fre"><![CDATA[Analyse numérique]]></string>
</entry>
</taxon>
</taxonPath>
<taxonPath>
<source>
<string language="fre">CDD 22e éd.</string>
<string language="eng">DDC 22nd ed.</string>
</source>
<taxon>
<id>003.54</id>
<entry>
<string language="fre"><![CDATA[Théorie de l'information]]></string>
</entry>
</taxon>
</taxonPath>
<taxonPath>
<source>
<string language="fre">CDD 22e éd.</string>
<string language="eng">DDC 22nd ed.</string>
</source>
<taxon>
<id>005.7</id>
<entry>
<string language="fre"><![CDATA[données dans les systèmes informatiques]]></string>
</entry>
</taxon>
</taxonPath>
<taxonPath>
<source>
<string language="fre">CDD 22e éd.</string>
<string language="eng">DDC 22nd ed.</string>
</source>
<taxon>
<id>652.8</id>
<entry>
<string language="fre"><![CDATA[cryptographie]]></string>
</entry>
</taxon>
</taxonPath>
<taxonPath>
<source>
<string language="fre">CDD 22e éd.</string>
<string language="eng">DDC 22nd ed.</string>
</source>
<taxon>
<id>510</id>
<entry>
<string language="fre"><![CDATA[Mathématiques]]></string>
</entry>
</taxon>
</taxonPath>
</classification> </lom>