receiver-keypair.rst

Receiver key pair generation

The recipient generates a private key x_r ∈ Z_q^* and the corresponding public key y_r0 = G₀^x_r, y_r1 = G₁^x_r.

The private key is kept private and the public key is published.

If the following two operations are executed quickly, the private key should be kept in ephemeral storage to reduce the risk of subsequential leakage.