New answers tagged


even if the topic is two years old and @jtgrassie's answer is very complete, I think it's worth adding a subtle point in "Pedersen VS ElGamal commitments in Monero". No doubt Monero uses Pedersen which we can say it's theoretically/perfectly hiding and computationally/imperfectly binding. However in the broader context of RingCT (where Pedersen ...

Top 50 recent answers are included