Expand description

The ciphertext-commitment equality proof instruction.

A ciphertext-commitment equality proof is defined with respect to a twisted ElGamal ciphertext and a Pedersen commitment. The proof certifies that a given ciphertext and a commitment pair encrypts/encodes the same message. To generate the proof, a prover must provide the decryption key for the first ciphertext and the Pedersen opening for the commitment.

Structs§