What are the three formal criteria that define a valid zero-knowledge proof protocol?

Conditions

• The protocol involves a prover and a verifier.
• The prover possesses a secret or private information relevant to the statement.
• The goal is to convince the verifier of a statement about that secret without revealing the secret.

Reasoning, step by step

1. Define Correctness: If both the prover and the verifier act honestly according to the protocol rules, the verifier will always accept the proof.
2. Define Soundness: If the prover does not know the secret, they cannot successfully convince the verifier of the statement.
3. Define Zero-Knowledge Property: After following the protocol, the verifier learns nothing more than the statement itself; their final knowledge state must be simulatable without access to the secret.

Example

The speaker formalizes the requirements into three distinct criteria. First, correctness guarantees that honest execution always leads to acceptance. Second, soundness prevents deception: a prover lacking the secret witness cannot fabricate a convincing transcript, as demonstrated by the color-blind pen guesser failing repeated trials. Third, the zero-knowledge property ensures informational minimality; the verifier's final knowledge state must be simulatable without access to the secret.

Common misconceptions

• Misconception that ZKPs Leak Underlying Secrets: Learners often assume that successfully proving a statement necessarily exposes the witness or secret used to verify it.
• Confusing secrecy of the witness with secrecy of all information: Zero-knowledge means the verifier learns nothing at all from the interaction, whereas the key requirement is that the secret itself is not revealed.

Watch the explanation

Explore next

• Why must the pen swapping experiment be repeated multiple times to constitute a valid zero-knowledge proof?
• How does revealing all other cards prove a hidden card is red without exposing its number?