Functional Commitments
summary
Defines functional commitments (commit, local opening, check) and proves two security tiers: function binding (local consistency) vs stronger extractability (rewinding or ideal-oracle extractors). Gives concrete constructions: a pairing-based KZG-style scheme with one-group-element commitments and one-group-element proofs, linear-size SRS, checking via two pairings and reduction to the Q-Power SDH assumption; and a Pedersen/matrix scheme with square-root proof tradeoff (public-coin setup, larger proofs but smaller SRS). Open problems: post‑quantum short proofs and public setups.
AI-written summary · about
chapters (12)
- 0:00Functional commitments intro
- 1:19Why they matter
- 3:05Defining schemes
- 7:24Security properties
- 16:55Extractability vs binding
- 25:32Hiding properties
- 36:50Commitment constructions
- 41:05Polynomial commitments overview
- 42:31KZG construction
- 49:11Matrix-based commitments
- 54:31Open questions
- 56:01Q&A








