1
$\begingroup$

In the Scheme Based on the SDH Assumption (page 11 of the paper https://link.springer.com/content/pdf/10.1007%2F978-3-540-28628-8_14.pdf), how does the commitment get revealed with the master trapdoor x?

| improve this question | | | | |
$\endgroup$
  • $\begingroup$ Could you elaborate? As far as I understood, the knowledge of trapdoor is not necessary for revealing. It's required only for equivocating. $\endgroup$ – Occams_Trimmer Jun 9 '19 at 14:45
  • $\begingroup$ What do u mean with equivocating? Isn't the master trapdoor used for someone, other than the sender, to know the committed message? $\endgroup$ – Fiono Jun 9 '19 at 15:14
  • $\begingroup$ Im asking how can u know a if you know x, mathematically. $\endgroup$ – Fiono Jun 9 '19 at 15:22
  • $\begingroup$ No, according to the paper the trapdoor is used to open a commitment to a message M with randomness R to another message M' and randomness R'. I'd read the full version of the paper since it is written a bit more formally. $\endgroup$ – Occams_Trimmer Jun 9 '19 at 15:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.