New answers tagged commitments
1
vote
What is the difference between those two KZG Polynomial Commitment Schemes?
Both represent the same thing. The first one uses the additive notation & the 2nd one uses the multiplicative notation. That is the only difference.
KZG actually uses an Elliptic Curve Group, so ...
- 2,251
2
votes
Accepted
Pedersen commitments equivalence
An EC Pedersen commitment is of the form $C=(bG+vH)$, where $v$ is the scalar value being committed to, $b$ is the scalar blinding factor, and $G$ and $H$ are well-known generator points on the curve. ...
- 4,257
0
votes
Accepted
How to multiply the Pedersen Commitment of two numbers?
Sort of related, we have the identity
$$C(x_1*x_2,-b_1*b_2)=x_1C(x_2,b_2)-b_2C(x_1,b_1)=x_2C(x_1,b_1)-b_1C(x_2,b_2)$$
(note the similarity to the Diffie-Hellman identity) but in general we cannot ...
- 18.2k
Top 50 recent answers are included
Related Tags
commitments × 223zero-knowledge-proofs × 75
hash × 19
protocol-design × 17
discrete-logarithm × 17
encryption × 10
collision-resistance × 9
public-key × 8
signature × 8
pairings × 8
elliptic-curves × 7
secret-sharing × 7
multiparty-computation × 7
verifiability × 7
homomorphic-encryption × 6
provable-security × 6
elgamal-encryption × 6
symmetric × 5
blind-signature × 5
authenticated-encryption × 4
pseudo-random-generator × 4
schnorr-signature × 4
threshold-cryptography × 4
snarks × 4
cryptanalysis × 3