• Top
    • Documentation
    • Books
    • Recursion-and-induction
    • Boolean-reasoning
    • Debugging
    • Projects
      • Apt
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Taspi
      • Bitcoin
      • Des
      • Ethereum
      • Sha-2
      • Yul
      • Zcash
        • Jubjub
        • Lift-zcash-r1cs
        • Verify-zcash-r1cs
        • Pedersen-hash
          • Pedersen-segment-scalar
          • Pedersen-segment-point
          • Find-group-hash
          • Pedersen-point
          • Pedersen-enc
          • Group-hash
          • Coordinate-extract
          • Pedersen-segment-addend
          • Pedersen
          • Pedersen-pad
          • Pedersen-hash-injectivity-properties
            • Pedersen-hash-bound-properties
            • Pedersen-hash-image-properties
            • *pedersen-c*
          • Zcash-gadgets
          • Bit/byte/integer-conversions
          • Constants
          • Blake2-hash
          • Randomness-beacon
        • Proof-checker-itp13
        • Bigmem
        • Regex
        • ACL2-programming-language
        • Java
        • C
        • Jfkr
        • X86isa
        • Equational
        • Cryptography
        • Where-do-i-place-my-book
        • Json
        • Execloader
        • Builtins
        • Solidity
        • Paco
        • Concurrent-programs
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Pedersen-hash

    Pedersen-hash-injectivity-properties

    Injectivity of pedersen-segment-scalar.

    Theorem 5.4.1 in [ZPS:5.4.1.7] proves the injectivity of the encoding function \langle\cdot\rangle, which is pedersen-segment-scalar in our formalization. Theorem 5.4.1 also proves bounds of that function, which we prove in pedersen-segment-scalar-bound and in pedersen-segment-scalar-not-zero-proof.

    Since pedersen-segment-scalar is defined via pedersen-segment-scalar-loop, so we need to prove injectivity properties for the latter first.

    The proof is explained in the comments in this file.