Zero-Knowledge Protocols for NTRU: Application to Identification and Proof of Plaintext Knowledge.

We propose zero-knowledge and proof-of-knowledge protocols for NTRU. One is for the relation on secret-key knowledge and the other for that on plaintext knowledge. They are the first non-trivial constructions of these protocols for NTRU. Additionally, the former directly yields an identification scheme based on NTRU. [ABSTRACT FROM AUTHOR]