Skip to main content

party_j_respond_proved

Function party_j_respond_proved 

Source
pub fn party_j_respond_proved(
    i_public: &PaillierPublicKey,
    ck_i: &CommitmentKey,
    ck_j: &CommitmentKey,
    q: &BigUint,
    msg: &ProvedMessage1,
    x_j: &BigUint,
) -> Result<(ProvedMessage2, BigUint), MtaProofError>
Expand description

Party j responds in the proved MtA: verify the range proof, then multiply by x_j and mask with β′.

i_public is the initiator’s Paillier public key — the exchange runs under it, so j needs NO private material (j could never open the initiator’s ciphertext anyway). ck_j is j’s own commitment key (the initiator proved against it); ck_i is party i’s key (i verifies the respondent proof j produces). Returns the response for i plus j’s own share β′.