Expand description
The ciphertext-commitment equality proof instruction.
A ciphertext-commitment equality proof is defined with respect to a twisted ElGamal ciphertext and a Pedersen commitment. The proof certifies that a given ciphertext and a commitment pair encrypts/encodes the same message. To generate the proof, a prover must provide the decryption key for the first ciphertext and the Pedersen opening for the commitment.
Structsยง
- The context data needed to verify a ciphertext-commitment equality proof.
- The instruction data that is needed for the
ProofInstruction::VerifyCiphertextCommitmentEquality
instruction.