If verifiers are public blockchain nodes, which might leak information. Does this imply that range proofs such as Boudot's and Lipmma's (squaring based) approach could not be applied, unless a trusted set-up is used?

In this case, if we need a range proof without trusted set-up, what are the choices out there? Bullet range proof? any other altnernatives?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.