Commit Graph

24 Commits

Author SHA1 Message Date
str4d 9585c67ed2
book: Refine types on Commitments page
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2021-05-21 21:23:08 +01:00
Jack Grigg d0c16910d6 book: Document why ivk != 0 2021-05-11 19:14:52 +12:00
str4d 632fa8dcf2
Merge pull request #68 from daira/daira-nullifiers
[Book] Update nullifier explanation to include Extract_P
2021-04-22 05:50:01 +01:00
Daira Hopwood 18bc70afa2 [Book] Explain the decision to exclude zero points and scalars for KA.Orchard. fixes #62
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-04-21 18:38:25 +01:00
Daira Hopwood f5bab61f81 Update nullifier explanation to include Extract_P.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-04-21 18:25:31 +01:00
Daira Hopwood 0191fa0a47 Orchard book: minimal description of unified addresses.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-03-27 17:08:39 +00:00
Jack Grigg f563c1636f book: Update commitment tree section with the design decision 2021-02-12 01:47:04 +00:00
str4d d541261507
Apply suggestions from review
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2021-02-12 08:09:45 +13:00
Jack Grigg adb377de7d book: Document design rationale for Orchard keys and addresses 2021-02-08 18:31:36 +00:00
str4d a2f85c7932
Apply editorial suggestions from code review
Co-authored-by: Daira Hopwood <daira@jacaranda.org>
2021-01-22 14:52:05 +13:00
Jack Grigg 18e039218b book: Note that we use 0 for uncommitted leaves in the commitment tree 2021-01-22 00:32:24 +00:00
Daira Hopwood d6fd00b5b3 Cosmetics and Markdown formatting.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-01-21 00:07:38 +00:00
Daira Hopwood 265ff91cc6 F might be Poseidon.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-01-21 00:07:21 +00:00
Daira Hopwood db071913b6 Explain in more detail the argument for Balance.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-01-21 00:06:50 +00:00
Daira Hopwood 3ca9704d30 Swap ak and nk in the input to ShortCommit^{ivk}.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
2021-01-21 00:05:47 +00:00
Jack Grigg f3a36457d7 book: Add rationale for nullifier design 2021-01-20 14:12:38 +00:00
Jack Grigg 0abc0ef11a book: Revert to the previous nullifier design
We examined the nullifier designs more closely, and determined that the
previously-selected design was actually fine, but for a somewhat-subtle
reason: even though an adversary with knowledge of a victim's full viewing
key could choose psi to cancel out Hash_nk(rho), the nullifier still
directly depends on rho via the note commitment.
2021-01-20 14:06:03 +00:00
Jack Grigg 9410d14d0a book: Switch to a new nullifier design
The previously-selected design was broken because an adversary with
knowledge of a victim's full viewing key could perform a Faerie Gold
attack: given knowledge of nk, they can choose psi to cancel out
Hash_nk(rho) and cause a collision.
2021-01-09 00:22:52 +00:00
Jack Grigg 750bdfb700 book: Update definitions on nullifier page 2021-01-08 23:29:46 +00:00
Jack Grigg 0fcacf9af0 book: Start adding Orchard design notes
Some of this content may move into the concepts section, or possibly into
a dedicated specification area, but for now the design section includes
our choices alongside the reasoning.
2021-01-08 17:10:12 +00:00
Jack Grigg db24a2ac4d book: Add KaTeX support 2021-01-08 17:01:35 +00:00
Jack Grigg 10bae831eb Rename to Orchard 2021-01-08 16:51:10 +00:00
Jack Grigg 8e6d2a7023 Add initial book skeleton 2020-10-27 21:23:20 +00:00
Jack Grigg b975600b35 Initialise empty mdBook 2020-10-20 23:02:49 +01:00