> I'm not aware of any post-quantum equivalent to Pedersen commitments I just learned from Andrew Poelstra of just such a construction [0], which even supports

> I'm not aware of any post-quantum equivalent to Pedersen commitments I just learned from Andrew Poelstra of just such a construction [0], which even supports migration from Pedersen commitments. [0] https://eprint.iacr.org/2015/628 https://eprint.iacr.org/2015/628