• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Taspi
      • Bitcoin
      • Riscv
      • Des
      • Ethereum
      • X86isa
      • Sha-2
      • Yul
      • Zcash
        • Jubjub
        • Verify-zcash-r1cs
        • Lift-zcash-r1cs
        • Pedersen-hash
          • Pedersen-segment-scalar
          • Pedersen-segment-point
          • Find-group-hash
          • Pedersen-point
          • Pedersen-enc
          • Group-hash
          • Coordinate-extract
          • Pedersen-segment-addend
          • Pedersen
          • Pedersen-pad
          • Pedersen-hash-injectivity-properties
          • Pedersen-hash-bound-properties
          • Pedersen-hash-image-properties
          • *pedersen-c*
        • Zcash-gadgets
        • Bit/byte/integer-conversions
        • Constants
        • Blake2-hash
        • Randomness-beacon
      • Proof-checker-itp13
      • Regex
      • ACL2-programming-language
      • Json
      • Jfkr
      • Equational
      • Cryptography
      • Poseidon
      • Where-do-i-place-my-book
      • Axe
      • Bigmems
      • Builtins
      • Execloader
      • Aleo
      • Solidity
      • Paco
      • Concurrent-programs
      • Bls12-377-curves
    • Debugging
    • Std
    • Proof-automation
    • Macro-libraries
    • ACL2
    • Interfacing-tools
    • Hardware-verification
    • Software-verification
    • Math
    • Testing-utilities
  • Zcash

Pedersen-hash

A formalization of Zcash's Pedersen hash.

This is described in [ZPS:5.4.1.7], which refers to several other parts of [ZPS]. We may split this file and XDOC topic into multiple ones that correspond to different parts of [ZPS], but for now we put here everything needed to define Pedersen hash.

Subtopics

Pedersen-segment-scalar
The function \langle\cdot\rangle in [ZPS:5.4.1.7].
Pedersen-segment-point
The function \mathcal{I} in [ZPS:5.4.1.7].
Find-group-hash
The function \mathsf{FindGroupHash^{\mathbb{J}^{(r)*}}} [ZPS:5.4.9.5].
Pedersen-point
The function \mathsf{PedersenHashToPoint} [ZPS:5.4.1.7].
Pedersen-enc
The function \mathsf{enc} in [ZPS:5.4.1.7].
Group-hash
The function \mathsf{GroupHash_\mathsf{URS}^{\mathbb{J}^{(r)*}}} [ZPS:5.4.9.5].
Coordinate-extract
The function \mathsf{Extract}_{\mathbb{J}^{(r)}} [ZPS:5.4.9.4].
Pedersen-segment-addend
The addend point in the definition of \mathsf{PedersenHashToPoint} [ZPS:5.4.1.7].
Pedersen
The function \mathsf{PedersenHash} [ZPS:5.4.1.7].
Pedersen-pad
Pedersen hash padding [ZPS:5.4.1.7].
Pedersen-hash-injectivity-properties
Injectivity of pedersen-segment-scalar.
Pedersen-hash-bound-properties
Some properties about bounds of pedersen-segment-scalar.
Pedersen-hash-image-properties
Some properties about the image of pedersen.
*pedersen-c*
The constant c in [ZPS:5.4.1.7].