Concise Mercurial Vector Commitments and Independent Zero-Knowledge Sets with Short Proofs
A (trapdoor) mercurial commitment has two commitment procedures. At committing time, the committer can choose not to commit to a specific message and rather generate a dummy value which it will be able to softly open to any message without being able to completely open it. Hard commitments, on the other hand, can be hardly or softly opened to only one specific message. At Eurocrypt 2008, Catalano, Fiore and Messina (CFM) introduced an extension called Trapdoor q-Mercurial Commitment (qTMC), which al-lows committing to a vector of q messages.