zero knowledge proof based on rsa commitment