top | item 9684474

Confidential Transactions

56 points| jc123 | 10 years ago |people.xiph.org

7 comments

order

deckar01|10 years ago

> A commitment scheme lets you keep a piece of data secret but commit to it so that you can not change it later.

> commitment = SHA256( binding_factor || data )

> Tell someone the commitment, then [later] reveal both the data and blinding factor.

It looks like I can change my data, then generate a binding factor that will combine to produce the original hash input.

throwaway7767|10 years ago

>> A commitment scheme lets you keep a piece of data secret but commit to it so that you can not change it later. >> commitment = SHA256( binding_factor || data ) >> Tell someone the commitment, then [later] reveal both the data and blinding factor.

>It looks like I can change my data, then generate a binding factor that will combine to produce the original hash input.

If you can find SHA256 collisions on demand. But if you can do that, you should probably be writing a paper about it and advancing the state of the art.

TheLoneWolfling|10 years ago

Only if you can break SHA. But still, good point.