In a traditional commitment scheme, it's very simple. The idea is that it's similar to a hash function where you are hashing your bid and you're sending it to this seller. But even though the commitment can hide a bid and can be binding, there is this concept of malleability. So if someone tries to see my commitment to $10 and generate a commitment to $9, they are actually knowing someone else has committed to $10. And one direction to actually do that is to use a zero knowledge proof. If I want to commit to $10, I have to prove that I know what I have to commit to. Why would that be non malleable? Because

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode