0

It is well-known that, in the setup phase of Pedersen commitment, it is necessary to generate $g,h\in G$. Then a user can compute $c = g^vh^r$ to commit the value $v$.

Is a trusted center needed to generate $g$ and $h$?

In other words, can $g$ and $h$ be publicly generated?

user109993
  • 63
  • 3
  • I'm not sure if I'm right. If the commitment scheme is realized in ECC setting, then there are many well studied curves, such as BabyJubJub, in which parameters are fixed, such as the generator. Consequently, with the curve, the committor or trusted thrid party can randomly pick a element $s\in Z^*_n$, compute $h=g^s$ and publish the public value $h$ and BabyJubJub curve's parameters. – ming alex Oct 12 '23 at 06:47
  • I'm not sure this is duplicate, however, see What is a Pedersen commitment? – kelalaka Oct 12 '23 at 15:14

0 Answers0