In the Scheme Based on the SDH Assumption (page 11 of the paper https://link.springer.com/content/pdf/10.1007%2F978-3-540-28628-8_14.pdf), how does the commitment get revealed with the master trapdoor x?

  • $\begingroup$ Could you elaborate? As far as I understood, the knowledge of trapdoor is not necessary for revealing. It's required only for equivocating. $\endgroup$
    – ckamath
    Jun 9, 2019 at 14:45
  • $\begingroup$ What do u mean with equivocating? Isn't the master trapdoor used for someone, other than the sender, to know the committed message? $\endgroup$
    – Fiono
    Jun 9, 2019 at 15:14
  • $\begingroup$ Im asking how can u know a if you know x, mathematically. $\endgroup$
    – Fiono
    Jun 9, 2019 at 15:22
  • $\begingroup$ No, according to the paper the trapdoor is used to open a commitment to a message M with randomness R to another message M' and randomness R'. I'd read the full version of the paper since it is written a bit more formally. $\endgroup$
    – ckamath
    Jun 9, 2019 at 15:50


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.