0
$\begingroup$

i want to make many pederson commitments $C=g^s h^r$ for a long time , do i have to change the generators $g$ and $h$ or its ok if i always used the same ones

$\endgroup$
1
$\begingroup$

You can use the same $g$. However, if the discrete log of $h$ relative to $g$ is known, then Pedersen is no longer binding. Thus, you cannot use an $h$ if there is any possibility of someone else knowing that discrete log.

| improve this answer | |
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.