Is There a Bindable Commitment Scheme?

In a traditional commitment scheme, it's very simple. The idea is that it's similar to a hash function where you are hashing your bid and you're sending it to this seller. But even though the commitment can hide a bid and can be binding, there is this concept of malleability. So if someone tries to see my commitment to $10 and generate a commitment to $9, they are actually knowing someone else has committed to $10. And one direction to actually do that is to use a zero knowledge proof. If I want to commit to $10, I have to prove that I know what I have to commit to. Why would that be non malleable? Because

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app