Discrete Log Equality Proofs.

Would standardise a short proof that a shared secret was worked out with a particular private key, without revealing that key.

In silent payments, the sender's device works out the receiver's address from a secret built with its own keys. A wrong result can still look valid, so coins could be lost. This proof lets the device show other software that it did the sum correctly, without giving away the private key.