Blog

I’m reading the Confidential Transactions paper, and it says that the blinding factor in the pedersen commitment is derived using a shared secret, but I can’t understand what’s preventing the sender from cheating a bit. The sender generates a ephemeral private key, and derives the secret as (ephemeral private key * receivers public key), andRead more

In the paper about Confidential Transaction, it is said that the blinding factor for the range proof can be deduced with the shared secret using HMAC. But i didn’t understand how the receiver can find the ‘main’ blinding factor, the one which is linked to the output commitment. I assumed he would do it usingRead more