0
$\begingroup$

It is well-known that, in the setup phase of Pedersen commitment, it is necessary to generate $g,h\in G$. Then a user can compute $c = g^vh^r$ to commit the value $v$.

Is a trusted center needed to generate $g$ and $h$?

In other words, can $g$ and $h$ be publicly generated?

Improve this question
$\endgroup$
2
  • $\begingroup$ I'm not sure if I'm right. If the commitment scheme is realized in ECC setting, then there are many well studied curves, such as BabyJubJub, in which parameters are fixed, such as the generator. Consequently, with the curve, the committor or trusted thrid party can randomly pick a element $s\in Z^*_n$, compute $h=g^s$ and publish the public value $h$ and BabyJubJub curve's parameters. $\endgroup$
    – X.H. Yue
    Commented Oct 12, 2023 at 6:47
  • $\begingroup$ I'm not sure this is duplicate, however, see What is a Pedersen commitment? $\endgroup$
    – kelalaka
    Commented Oct 12, 2023 at 15:14

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.