Create a Pedersen commitment: C = g^v · h^r mod p Binding: can't find v', r' such that g^v'·h^r' = C (unless you break DLP) Hiding: C reveals nothing about v (information-theoretically)
Create a Pedersen commitment: C = g^v · h^r mod p Binding: can't find v', r' such that g^v'·h^r' = C (unless you break DLP) Hiding: C reveals nothing about v (information-theoretically)