[Cryptography] Where are zero knowledge proofs actually used in the real world?

[The Doctor]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sun, 21 Feb 2016 22:23:00 -0800
Radia Perlman <radiaperlman at gmail.com> wrote:

> It seems like in pretty much all cases, it would be cheaper and faster to
> just do a public key signature to prove you know your private key. The only
> case where I've heard that zero knowledge proofs are actually used is in
> Intel's EPID scheme.

I seem to recall reading in a couple of books that ZKPs are used in at least some IFF (Identify Friend-or-Foe) systems.

- -- 
The Doctor [412/724/301/703/415] [ZS]

PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F  DD89 3BD8 FF2B 807B 17C1
WWW: https://drwho.virtadpt.net/

"Prophecies have a nasty way of fulfilling themselves if you let them."

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJWzKdjAAoJED1np1pUQ8RktkIP/jir9AGIit5LoSO5W5mCgIS8
kfOnCg2Vpl9xjY3xscsi/8UJbIkP1suQ+ir15aLKCmjeHLvkpzyNXxUrmA67VZcy
Fd++423A5KPUug7Ul9DBzTHZWEfOI77dyJcBPd8PLtb6akGQxS3Nz+n6RcJ35hIu
P8NkAOSSAnFIH2m/ic6BMAJekwaIq+dSTq6U67xbjkLwxhJzRFhCBeE3COs1SIgd
1WlvFOavwDJvCiepvRN1aU5tx3jaWj73pBRSmbfJOOFV1jKz78/Ax4Ld4CGN29vJ
6H/eGbls1ubQUl+sFJd0kvhkSg1d15WB2rqfAcmN6EAgB4bn88Aj/rnr+2V4n8+F
tQTYjKsDNzSseuVMJvWg6hFpPpjEHSLYWF2jjNwe6cWODrbqDn7FL7ocO6DFNCCU
Wfc5TEJ9KCW4Hz+REm4jcFCPL82xhhuj5kEKdKsgNbSdpi/xYOhvavIxFn2MsELn
ESCdi3H1FTGu0fHNqk01Xw5FZAAi8C6ilrbzdB3cetCVbj9yhrFOe/ry8J6tNxzX
sQhshRwNz2NF9yL9/t/YusnQBVPLOXVfAWOacdXT9Vze86ExfNW+2Z6Gal+EAPSn
hgVsUDchtNE77n2XYDwnwM7GTp41XK8rKhecCjCu1lC985hYR52SVMTTMNaIzJdA
FGMQrhWQcFHnTW0rsMOB
=7yaa
-----END PGP SIGNATURE-----