New answers tagged commitments
1
vote
What is the difference between those two KZG Polynomial Commitment Schemes?
Both represent the same thing. The first one uses the additive notation & the 2nd one uses the multiplicative notation. That is the only difference.
KZG actually uses an Elliptic Curve Group, so ...
- 2,251
2
votes
Accepted
Pedersen commitments equivalence
An EC Pedersen commitment is of the form $C=(bG+vH)$, where $v$ is the scalar value being committed to, $b$ is the scalar blinding factor, and $G$ and $H$ are well-known generator points on the curve. ...
- 4,257
0
votes
Accepted
How to multiply the Pedersen Commitment of two numbers?
Sort of related, we have the identity
$$C(x_1*x_2,-b_1*b_2)=x_1C(x_2,b_2)-b_2C(x_1,b_1)=x_2C(x_1,b_1)-b_1C(x_2,b_2)$$
(note the similarity to the Diffie-Hellman identity) but in general we cannot ...
- 18.2k
Top 50 recent answers are included