We begin by defining witness indistinguishability, or WI for short. A witness indistinguishable proof or argument system requires that the verifier does not learn anything about x after seeing a proof of x ∈ L; however, WI is a weaker property than zero knowledge. If the prover has both y and y′ as witnesses for x ∈ L, then under a WI system, the verifier cannot know whether y or y′ was used to...