%PDF-1.5
%
1 0 obj
<< /S /GoTo /D (section.1) >>
endobj
4 0 obj
(Introduction)
endobj
5 0 obj
<< /S /GoTo /D (section.2) >>
endobj
8 0 obj
(Mathematical preliminaries)
endobj
9 0 obj
<< /S /GoTo /D (subsection.2.1) >>
endobj
12 0 obj
(Notation and cryptographic assumptions)
endobj
13 0 obj
<< /S /GoTo /D (subsection.2.2) >>
endobj
16 0 obj
(Polynomial commitments)
endobj
17 0 obj
<< /S /GoTo /D (subsection.2.3) >>
endobj
20 0 obj
(Zero-knowledge proofs for polynomial commitments)
endobj
21 0 obj
<< /S /GoTo /D (subsection.2.4) >>
endobj
24 0 obj
(Mercurial commitments)
endobj
25 0 obj
<< /S /GoTo /D (section.3) >>
endobj
28 0 obj
(All-but-k mercurial commitments)
endobj
29 0 obj
<< /S /GoTo /D (subsection.3.1) >>
endobj
32 0 obj
(Terminology and notation)
endobj
33 0 obj
<< /S /GoTo /D (subsection.3.2) >>
endobj
36 0 obj
(Formal definitions)
endobj
37 0 obj
<< /S /GoTo /D (section.4) >>
endobj
40 0 obj
(Constructions)
endobj
41 0 obj
<< /S /GoTo /D (subsection.4.1) >>
endobj
44 0 obj
(Multiset commitments from roots of polynomials)
endobj
45 0 obj
<< /S /GoTo /D (subsection.4.2) >>
endobj
48 0 obj
(Vector commitments from evaluations of polynomials)
endobj
49 0 obj
<< /S /GoTo /D (section.5) >>
endobj
52 0 obj
(Conclusion)
endobj
53 0 obj
<< /S /GoTo /D (section*.11) >>
endobj
56 0 obj
(References)
endobj
57 0 obj
<< /S /GoTo /D (section*.12) >>
endobj
60 0 obj
(Appendix A: Change log)
endobj
61 0 obj
<< /S /GoTo /D [62 0 R /FitH] >>
endobj
88 0 obj <<
/Length 5658
/Filter /FlateDecode
>>
stream
xڝ