Coming soon - Get a detailed view of why an account is flagged as spam!
view details

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

22
Instead of elliptic curve keys, could randomly generated scalars be used for pedersen commitments/encrypting arbitrary values?
Post Body

I was reading Greg Maxwell's paper on Confidential Transactions and I think utilizing the additive homomorphic properties of elliptic curves for verifying transaction amounts is fascinating. One question I had was would it be possible to utilize scalars seeded with CS-PRNG output to "blind" values in a secure manner? I understand the necessity of signing the pedersen commitments within confidential transactions. I'm mainly referring to just securely encrypting and decrypting the data. This probably sounds confusing so let me try to give out an example. For instance if one generated the pedersen commitment C = X A Where X is a 256 bit randomly generated scalar and A is a normal integer value one wishes to blind. This can be trivially decrypted by preforming: A = C - X. If one were to preform cryptanalysis on the commitment C would it look like the random value X was mutated at all or would it still look like random data? Because I believe that even if the attacker knew that C had been mutated in some way, they would have no idea what A could be since X was a sufficiently random source. I'm not trying to implement my own encryption algorithm or anything, I'm just curious on how secure this method would be if one were to analyze the ciphertext/pedersen commitment. Thanks for all the help!

Author
User Disabled
Account Strength
0%
Disabled 2 months ago
Account Age
5 years
Verified Email
Yes
Verified Flair
No
Total Karma
220
Link Karma
93
Comment Karma
127
Profile updated: 3 days ago
Posts updated: 4 months ago

Subreddit

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.
Posted
4 years ago