0

It is well-known that, in the setup phase of Pedersen commitment, it is necessary to generate $g,h\in G$. Then a user can compute $c = g^vh^r$ to commit the value $v$.

Is a trusted center needed to generate $g$ and $h$?

In other words, can $g$ and $h$ be publicly generated?

user109993
  • 135
  • 5

0 Answers0