A verifier checks whether a prover has demonstrated a claimed statement or knowledge without necessarily learning the hidden witness. In a zero-knowledge proof, the verifier receives evidence rather than the secret itself. section 7.2
A verifier’s role can be seen in two stages:
- Receive the prover’s claim and proof, such as evidence that Peggy knows a discrete logarithm without revealing the value. section 7.2
- Supply or check the public portions of a protocol, while the prover supplies hidden inputs and intermediate values. section 15.3.9
- Accept only when the combined information supports correct program execution or knowledge of the claimed witness. section 15.3.9 section 7.2



