Commit Graph

108 Commits

Author SHA1 Message Date
Jack Grigg 0abc0ef11a book: Revert to the previous nullifier design
We examined the nullifier designs more closely, and determined that the
previously-selected design was actually fine, but for a somewhat-subtle
reason: even though an adversary with knowledge of a victim's full viewing
key could choose psi to cancel out Hash_nk(rho), the nullifier still
directly depends on rho via the note commitment.
2021-01-20 14:06:03 +00:00
Jack Grigg 9410d14d0a book: Switch to a new nullifier design
The previously-selected design was broken because an adversary with
knowledge of a victim's full viewing key could perform a Faerie Gold
attack: given knowledge of nk, they can choose psi to cancel out
Hash_nk(rho) and cause a collision.
2021-01-09 00:22:52 +00:00
Jack Grigg 750bdfb700 book: Update definitions on nullifier page 2021-01-08 23:29:46 +00:00
Jack Grigg 0fcacf9af0 book: Start adding Orchard design notes
Some of this content may move into the concepts section, or possibly into
a dedicated specification area, but for now the design section includes
our choices alongside the reasoning.
2021-01-08 17:10:12 +00:00
Jack Grigg db24a2ac4d book: Add KaTeX support 2021-01-08 17:01:35 +00:00
Jack Grigg 10bae831eb Rename to Orchard 2021-01-08 16:51:10 +00:00
Jack Grigg 8e6d2a7023 Add initial book skeleton 2020-10-27 21:23:20 +00:00
Jack Grigg b975600b35 Initialise empty mdBook 2020-10-20 23:02:49 +01:00