Timeline for Is it possible to check pedersen commitment is of postive or negative number without knowing the original value
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 12, 2023 at 18:32 | comment | added | Prady Tej | Here, I refer to the "encrypted" remaining balance as Pedersen's commitment to the remaining balance. | |
| Nov 11, 2023 at 20:52 | comment | added | Prady Tej | I'm curious how crypto transactions accomplish this because this is a common issue. | |
| Nov 11, 2023 at 20:45 | comment | added | Prady Tej | We need to know the original value to build the range proof because range proofs are created using the original value, but in my case, I don't know the original value. Simply put, I know the transactedAmount, and after deducting the commitment of the transactedAmount from the balance, I only know the encrypted sender's remaining balance((C(10, r1) - C(15,r2). Is it possible to determine whether the encrypted sender's reamingnbalance is negative or not? I'm curious how crypto transactions accomplish this because this is a common issue. | |
| Nov 11, 2023 at 8:28 | history | answered | poncho | CC BY-SA 4.0 |