Skip to content

Glossary

Pedersen Commitment

A homomorphic commitment scheme that hides a value while letting two commitments be added together — the basis for confidential transaction amounts on Monero and others.

A Pedersen commitment to a value v with blinding r is r·G + v·H where G and H are independent elliptic-curve generators. Without r, an observer learns nothing about v (hiding); the committer cannot later open it to a different value (binding).

The scheme is homomorphic: committing to v1 then to v2 and adding the commitments gives a commitment to (v1+v2). That property is what lets Monero and confidential-transaction protocols prove "inputs = outputs" without revealing any amount.