Skip to main content
Cryptography

Return to Question

Tweeted twitter.com/StackCrypto/status/1617718860647391235
Add tags
Link
mat
mat
  • 2.5k
  • 13
  • 28
added 9 characters in body; edited title
Source Link
Geoffroy Couteau
Geoffroy Couteau
  • 21.4k
  • 2
  • 50
  • 72

Proof of menbershipmembership on a merkle tree

I read the zcash paper recently. But I have been puzzled by a question. How did the authors prove that the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors provided authentication paths for a commitment. But how to provide them in a private way?

Proof of menbership on a merkle tree

I read zcash paper recently. But I have been puzzled by a question. How did the authors prove the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors provided authentication paths for a commitment. But how to provide them in a private way?

Proof of membership on a merkle tree

I read the zcash paper recently. But I have been puzzled by a question. How did the authors prove that the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors provided authentication paths for a commitment. But how to provide them in a private way?

Source Link
Xin
Xin
  • 61
  • 1

Proof of menbership on a merkle tree

I read zcash paper recently. But I have been puzzled by a question. How did the authors prove the coin commitment appears as a leaf of a Merkle tree with root rt? Apparently, the authors provided authentication paths for a commitment. But how to provide them in a private way?