Indeed that is one downside of hiding amounts, as shown in row "Fully auditable supply" in [1]. Finding out just one discrete log (log_G(H)) can collapse the whole system with undetectable inflation.
Indeed that is one downside of hiding amounts, as shown in row "Fully auditable supply" in [1]. Finding out just one discrete log (log_G(H)) can collapse the whole system with undetectable inflation.