Expand description

This module implements a commitment scheme in the random oracle model.

Assume H is a hash function modeled as a random oracle. To commit to value v, sample a random string r from {0,1}^\rho and compute the commitment as c <- H(v || r), the opening being r. To verify the commitment given (v', c, r') compute c' <- H(v' || r') and check that c == c'.

Structs§

  • A Commitment to some value.
  • The opening information for a commitment.

Constants§

  • The length of a commitment value, derived from the output of a HKDF extraction using SHA-256.