What does “constant rate” mean in universal composable commitment scheme?
I'm wondering what does the "constant rate" mean in universal composable commitment scheme? I have known the rate of a commitment scheme is message length divided by the communication complexity of the scheme. What's the "constant" mean here? Must the constant be a number less than 1?
commitments
asked Dec 18 '18 at 17:14
CryptoLover
402212
add a comment |
I'm wondering what does the "constant rate" mean in universal composable commitment scheme? I have known the rate of a commitment scheme is message length divided by the communication complexity of the scheme. What's the "constant" mean here? Must the constant be a number less than 1?
commitments
asked Dec 18 '18 at 17:14
CryptoLover
402212
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21
add a comment |
I'm wondering what does the "constant rate" mean in universal composable commitment scheme? I have known the rate of a commitment scheme is message length divided by the communication complexity of the scheme. What's the "constant" mean here? Must the constant be a number less than 1?
commitments
asked Dec 18 '18 at 17:14
CryptoLover
402212
I'm wondering what does the "constant rate" mean in universal composable commitment scheme? I have known the rate of a commitment scheme is message length divided by the communication complexity of the scheme. What's the "constant" mean here? Must the constant be a number less than 1?
commitments
commitments
asked Dec 18 '18 at 17:14
CryptoLover
402212
asked Dec 18 '18 at 17:14
CryptoLover
402212
asked Dec 18 '18 at 17:14
CryptoLover
402212
asked Dec 18 '18 at 17:14
CryptoLover
402212
asked Dec 18 '18 at 17:14
CryptoLover
402212
402212
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21
add a comment |
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21
add a comment |
1 Answer
1
active
oldest
votes
Constant rate in general means that the overhead from a non-secure method is constant. So, in a simple way, if I am committing to an $ell$-bit message, then the size of the commitment is $O(ell)$. In some cases, however, one also allows an additive factor that is independent of the message size. Thus, for example, it could be that to commit to a message of size $ell$ the amount is $O(ell)+{rm poly}(n)$, where $n$ is the security parameter.
Note that typically these are measured in an amortized manner. So, you have to send many commitments (or a long message) for it to be true. But, again, this depends on the exact scheme, so you'll have to read the details.
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
return StackExchange.using("mathjaxEditing", function () {
StackExchange.MarkdownEditor.creationCallbacks.add(function (editor, postfix) {
StackExchange.mathjaxEditing.prepareWmdForMathJax(editor, postfix, [["$", "$"], ["\\(","\\)"]]);
});
});
}, "mathjax-editing");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "281"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f65963%2fwhat-does-constant-rate-mean-in-universal-composable-commitment-scheme%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Constant rate in general means that the overhead from a non-secure method is constant. So, in a simple way, if I am committing to an $ell$-bit message, then the size of the commitment is $O(ell)$. In some cases, however, one also allows an additive factor that is independent of the message size. Thus, for example, it could be that to commit to a message of size $ell$ the amount is $O(ell)+{rm poly}(n)$, where $n$ is the security parameter.
Note that typically these are measured in an amortized manner. So, you have to send many commitments (or a long message) for it to be true. But, again, this depends on the exact scheme, so you'll have to read the details.
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
add a comment |
Constant rate in general means that the overhead from a non-secure method is constant. So, in a simple way, if I am committing to an $ell$-bit message, then the size of the commitment is $O(ell)$. In some cases, however, one also allows an additive factor that is independent of the message size. Thus, for example, it could be that to commit to a message of size $ell$ the amount is $O(ell)+{rm poly}(n)$, where $n$ is the security parameter.
Note that typically these are measured in an amortized manner. So, you have to send many commitments (or a long message) for it to be true. But, again, this depends on the exact scheme, so you'll have to read the details.
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
add a comment |
Constant rate in general means that the overhead from a non-secure method is constant. So, in a simple way, if I am committing to an $ell$-bit message, then the size of the commitment is $O(ell)$. In some cases, however, one also allows an additive factor that is independent of the message size. Thus, for example, it could be that to commit to a message of size $ell$ the amount is $O(ell)+{rm poly}(n)$, where $n$ is the security parameter.
Note that typically these are measured in an amortized manner. So, you have to send many commitments (or a long message) for it to be true. But, again, this depends on the exact scheme, so you'll have to read the details.
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
Constant rate in general means that the overhead from a non-secure method is constant. So, in a simple way, if I am committing to an $ell$-bit message, then the size of the commitment is $O(ell)$. In some cases, however, one also allows an additive factor that is independent of the message size. Thus, for example, it could be that to commit to a message of size $ell$ the amount is $O(ell)+{rm poly}(n)$, where $n$ is the security parameter.
Note that typically these are measured in an amortized manner. So, you have to send many commitments (or a long message) for it to be true. But, again, this depends on the exact scheme, so you'll have to read the details.
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
answered Dec 18 '18 at 17:34
Yehuda Lindell
18.6k3560
18.6k3560
add a comment |
add a comment |
Thanks for contributing an answer to Cryptography Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
Use MathJax to format equations. MathJax reference.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f65963%2fwhat-does-constant-rate-mean-in-universal-composable-commitment-scheme%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Can you please post a reference to a paper or something where you encountered this term?
– SEJPM♦
Dec 18 '18 at 17:21