3 ms·
> The 'trapdoor' is in the protocol by design. Only due to ignorance. It is well known that the bases of a Pedersen commitment can and should be sampled random
by ewillbefull 8y ago
> The 'trapdoor' is in the protocol by design.
Only due to ignorance. It is well known that the bases of a Pedersen commitment can and should be sampled randomly; a trusted setup is only subverting the security of the primitive.