Hacker News new | ask | show | jobs
by ben-ray 1657 days ago
> Say one can send the exact cryptographic fingerprint and impersonate me. How is this anything better than me just sending password to authenticate?

The message can be signed with a private key to ensure you are not being impersonated. In cases where you'd also like anonymity, it is possible to add some salt as an input to the 'cryptographic fingerprint,' obfuscating the unsalted proof.

This video is good material for learning to reason about ZK proofs: https://www.youtube.com/watch?v=J3UlqJk3Kl0