Link Search Menu Expand Document

Commitment Scheme

A commitment scheme abstracts the notion of a “locked box”: the contents of the box are hidden (without the key), but can be opened in only one way. The two basic security properties of a commitment scheme are hiding and binding. Loosely, hiding means that it is hard for an adversary to tell apart between two commitments and two separate messages. Binding roughly means that it is hard for an adversary that is given a commitment to come up with an identical commitment that opens to a different message.


Table of contents