Skip to content

Equality proofs for encryptions + explicit RNG in range proof verification#919

Merged
jonas-lj merged 9 commits intomainfrom
jonas/eq_proofs
Jan 23, 2026
Merged

Equality proofs for encryptions + explicit RNG in range proof verification#919
jonas-lj merged 9 commits intomainfrom
jonas/eq_proofs

Conversation

@jonas-lj
Copy link
Copy Markdown
Contributor

No description provided.

@jonas-lj jonas-lj changed the title Equality proofs for encryptions Equality proofs for encryptions + explicit RNG in range proof verification Jan 22, 2026
@jonas-lj jonas-lj requested a review from benr-ml January 22, 2026 10:08
) -> RistrettoScalar {
RistrettoScalar::fiat_shamir_reduction_to_group_element(
&bcs::to_bytes(&(ciphertext, pk, y_p, y_d)).unwrap(),
&bcs::to_bytes(&(ciphertext, pk, y)).unwrap(),
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's also add here g::generator() even though it's constant

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both G and H, right?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's pk, no?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, the H used in the commitment. It's the point the blinding is multiplied with. It's derived from G, (the hash-to-curve of G as bytes) so I actually don't think it's needed.

@jonas-lj jonas-lj merged commit 5ecd2f1 into main Jan 23, 2026
9 checks passed
@jonas-lj jonas-lj deleted the jonas/eq_proofs branch January 23, 2026 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants