It's actually the "perfect hiding" property of Pedersen commitments. All good commitment schemes have a hiding property and a binding property, but if you are perfect in one of those two aspects then it is logically necessary that the other is at best computational (i.e. if the scheme is broken in the future this property is lost).

(People often misuse/misremember 'blinding' when they mean hiding, here).

As an alternative to illustrate the point, ElGamal commitments are the opposite: perfectly binding but only computationally hiding.

Reply to this note

Please Login to reply.

Discussion

I wrote about this in great detail here: https://reyify.com/blog/finessing-commitments/