Proving knowledge of a preimage of a hash without disclosing it? Posted by fgrieu, at crypto.stackexchange.com, 28 Jan 2012 We consider a public hash function $H$, assumed collision-resistant and preimage-resistant (for both first and second preimage)…