New answers tagged

1 vote

What is the difference between those two KZG Polynomial Commitment Schemes?

Both represent the same thing. The first one uses the additive notation & the 2nd one uses the multiplicative notation. That is the only difference. KZG actually uses an Elliptic Curve Group, so ...
  • 2,251
2 votes
Accepted

Pedersen commitments equivalence

An EC Pedersen commitment is of the form $C=(bG+vH)$, where $v$ is the scalar value being committed to, $b$ is the scalar blinding factor, and $G$ and $H$ are well-known generator points on the curve. ...
  • 4,257
0 votes
Accepted

How to multiply the Pedersen Commitment of two numbers?

Sort of related, we have the identity $$C(x_1*x_2,-b_1*b_2)=x_1C(x_2,b_2)-b_2C(x_1,b_1)=x_2C(x_1,b_1)-b_1C(x_2,b_2)$$ (note the similarity to the Diffie-Hellman identity) but in general we cannot ...
  • 18.2k

Top 50 recent answers are included