Commitment

Darkfi contract uses computationally binding, perfectly hiding pedersen commitment function in both money, and consensus contracts.

cm = comm(m, r), m is data encrypted as curve field element, r is a random curve scalar blinding factor, comm is a computationally hiding, computationally binding commitment.

Curve point commitment

Commitment to a curve point pt is tuple $(c m_{x}, c m_{y})$ , after conversion to affine coordinates of pt: $(p t_{x}, p t_{y})$

$c m_{x} = co mm (p t_{x}, r_{x})$ $c m_{y} = co mm (p t_{y}, r_{x})$