The “Commit-and-Prove” primitive

• Define a single primitive where parties can:

  • Commit to values
  • Prove “in ZK” statements regarding the committed values

• Can realize “C&P” in the CRS model (using UC commitment and UC ZK).

• Given access to ideal “C&P”, can do the [GMW87] compiler without computational assumptions.

Notes: