File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -64,8 +64,8 @@ Protocol rationale
6464Assume someone wants to buy the opening ` (r, x) ` of a Pedersen commitment `Q =
6565r* G + x* H` from a seller. The seller can't just use ` r* G` as the auxiliary
6666point in an adaptor signature and send it to the buyer. Upon receiving ` r*G `
67- the buyer would compute ` Q - r*G = x*H ` and since ` x ` usually belongs to a
68- reasonably small set, the buyer could simply brute-force ` x ` without paying.
67+ the buyer would compute ` Q - r*G = x*H ` and since ` x ` can belong to a small
68+ set, the buyer could simply brute-force ` x ` without paying.
6969This is where the multiplication proof for Pedersen commitments comes into
7070play: the seller chooses t1 and t2 s.t. ` t1*t2 = r ` , sends ` T1 = t1*G ` and
7171` T2 = t2*G ` as auxiliary points to the buyer along with the multiplication
You can’t perform that action at this time.
0 commit comments