29 KiB
29 KiB
Changelog
All notable changes to this library will be documented in this file.
The format is based on Keep a Changelog, and this library adheres to Rust's notion of Semantic Versioning.
[Unreleased]
Changed
- Bumped dependencies to
bls12_381 0.8
,ff 0.13
,group 0.13
,jubjub 0.10
[0.10.2] - 2023-03-16
Added
zcash_primitives::sapling::note
:NoteCommitment::temporary_zcashd_derive
- A new feature flag,
multicore
, has been added and is enabled by default. This allows users to selectively disable multicore support for Orchard proof creation by settingdefault_features = false
on theirzcash_primitives
dependency, such as is needed to enablewasm32-wasi
compilation.
[0.10.1] - 2023-03-08
Added
- Sapling bundle component constructors, behind the
temporary-zcashd
feature flag. These temporarily re-expose the ability to construct invalid Sapling bundles (that was removed in 0.10.0), and will be removed in a future release:zcash_primitives::transaction::components::sapling
:Bundle::temporary_zcashd_from_parts
SpendDescription::temporary_zcashd_from_parts
OutputDescription::temporary_zcashd_from_parts
[0.10.0] - 2023-02-01
Added
zcash_primitives::sapling
:keys::DiversifiedTransmissionKey
keys::{EphemeralSecretKey, EphemeralPublicKey, SharedSecret}
keys::{PreparedIncomingViewingKey, PreparedEphemeralPublicKey}
(re-exported fromnote_encryption
).note
, a module containing types related to Sapling notes. The existingNote
andRseed
types are re-exported here, and new types are added.Node::from_cmu
value
, containing types for handling Sapling note values and value commitments.Note::from_parts
Note::{recipient, value, rseed}
getter methods.impl Eq for Note
impl Copy for PaymentAddress
Changed
- MSRV is now 1.60.0.
zcash_primitives::transaction::components::sapling::builder
:SaplingBuilder::add_output
now takes azcash_primitives::sapling::value::NoteValue
.
zcash_primitives::sapling
:PaymentAddress::from_parts
now rejects invalid diversifiers.PaymentAddress::create_note
is now infallible.DiversifiedTransmissionKey
is now used instead ofjubjub::SubgroupPoint
in the following places:PaymentAddress::from_parts
PaymentAddress::pk_d
note_encryption::SaplingDomain::DiversifiedTransmissionKey
EphemeralSecretKey
is now used instead ofjubjub::Scalar
in the following places:Note::generate_or_derive_esk
note_encryption::SaplingDomain::EphemeralSecretKey
note_encryption::SaplingDomain::EphemeralPublicKey
is nowEphemeralPublicKey
instead ofjubjub::ExtendedPoint
.note_encryption::SaplingDomain::SharedSecret
is nowSharedSecret
instead ofjubjub::SubgroupPoint
.
- Note commitments now use
zcash_primitives::sapling::note::ExtractedNoteCommitment
instead ofbls12_381::Scalar
in the following places:zcash_primitives::sapling
:Note::cmu
zcash_primitives::sapling::note_encryption
:SaplingDomain::ExtractedCommitment
zcash_primitives::transaction::components::sapling
:OutputDescription::cmu
- The
cmu
field ofCompactOutputDescription
.
- Value commitments now use
zcash_primitives::sapling::value::ValueCommitment
instead ofjubjub::ExtendedPoint
in the following places:zcash_primitives::sapling::note_encryption
:prf_ock
SaplingDomain::ValueCommitment
zcash_primitives::sapling::prover
:TxProver::{spend_proof, output_proof}
return type.
zcash_primitives::transaction::components
:SpendDescription::cv
OutputDescription::cv
zcash_primitives::transaction::components
:sapling::{Bundle, SpendDescription, OutputDescription}
have had their fields replaced by getter methods.- The associated type
sapling::Authorization::Proof
has been replaced byAuthorization::{SpendProof, OutputProof}
. sapling::MapAuth::map_proof
has been replaced byMapAuth::{map_spend_proof, map_output_proof}
.
Removed
zcash_primitives::sapling
:- The fields of
Note
are now private (use the new getter methods instead). Note::uncommitted
(useNode::empty_leaf
instead).Note::derive_esk
(useSaplingDomain::derive_esk
instead).Note::commitment
(useNode::from_cmu
instead).PaymentAddress::g_d
NoteValue
(usezcash_primitives::sapling::value::NoteValue
instead).ValueCommitment
(usezcash_primitives::sapling::value::ValueCommitment
orzcash_proofs::circuit::sapling::ValueCommitmentPreimage
instead).note_encryption::sapling_ka_agree
testing::{arb_note_value, arb_positive_note_value}
(use the methods inzcash_primitives::sapling::value::testing
instead).
- The fields of
zcash_primitives::transaction::components
:- The fields of
sapling::{SpendDescriptionV5, OutputDescriptionV5}
(they are now opaque types; usesapling::{SpendDescription, OutputDescription}
instead). sapling::read_point
- The fields of
[0.9.1] - 2022-12-06
Fixed
zcash_primitives::transaction::builder
:Builder::build
was callingFeeRule::fee_required
with the number of Sapling outputs that have been added to the builder. It now instead provides the number of outputs that will be in the final Sapling bundle, including any padding.
[0.9.0] - 2022-11-12
Added
- Added to
zcash_primitives::transaction::builder
:Error::{InsufficientFunds, ChangeRequired, Balance, Fee}
Builder
state accessor methods:Builder::{params, target_height}
Builder::{transparent_inputs, transparent_outputs}
Builder::{sapling_inputs, sapling_outputs}
zcash_primitives::transaction::fees
, a new module containing abstractions and types related to fee calculations.FeeRule
, a trait that describes how to compute the fee required for a transaction given inputs and outputs to the transaction.fixed
, a module containing an implementation of the old fixed fee rule.zip317
, a module containing an implementation of the ZIP 317 fee rules.
- Added to
zcash_primitives::transaction::components
:amount::NonNegativeAmount
- Added to the
orchard
module:impl MapAuth<orchard::bundle::Authorized, orchard::bundle::Authorized> for ()
(the identity map).
- Added to the
sapling
module:impl MapAuth<Authorized, Authorized> for ()
(the identity map).builder::SaplingBuilder::{inputs, outputs}
: accessors for Sapling builder state.fees
, a module with Sapling-specific fee traits.
- Added to the
transparent
module:impl {PartialOrd, Ord} for OutPoint
builder::TransparentBuilder::{inputs, outputs}
: accessors for transparent builder state.fees
, a module with transparent-specific fee traits.
- Added to
zcash_primitives::sapling
:Note::commitment
impl Eq for PaymentAddress
- Added to
zcash_primitives::zip32
:impl TryFrom<DiversifierIndex> for u32
sapling::DiversifiableFullViewingKey::{diversified_address, diversified_change_address}
Changed
zcash_primitives::transaction::builder
:Builder::build
now takes aFeeRule
argument which is used to compute the fee for the transaction as part of the build process.Builder::value_balance
now returnsResult<Amount, BalanceError>
instead ofOption<Amount>
.Builder::{new, new_with_rng}
no longer fixes the fee for transactions to 0.00001 ZEC; the builder instead computes the fee using aFeeRule
implementation at build time.Error
now is parameterized by the types that can now be produced by fee calculation.
zcash_primitives::transaction::components::tze::builder::Builder::value_balance
now returnsResult<Amount, BalanceError>
instead ofOption<Amount>
.
Deprecated
zcash_primitives::zip32::sapling::to_extended_full_viewing_key
(useto_diversifiable_full_viewing_key
instead).
Removed
- Removed from
zcash_primitives::transaction::builder
:Builder::{new_with_fee, new_with_rng_and_fee
} (useBuilder::{new, new_with_rng}
instead along with aFeeRule
implementation passed toBuilder::build
.)Builder::send_change_to
(change outputs must be added to the builder by the caller, just like any other output).Error::ChangeIsNegative
Error::NoChangeAddress
Error::InvalidAmount
(replaced byError::BalanceError
).
- Removed from
zcash_primitives::transaction::components::sapling::builder
:SaplingBuilder::get_candidate_change_address
(change outputs must now be added by the caller).
- Removed from
zcash_primitives::zip32::sapling
:impl From<&ExtendedSpendingKey> for ExtendedFullViewingKey
(useExtendedSpendingKey::to_diversifiable_full_viewing_key
instead).
zcash_primitives::sapling::Node::new
(useNode::from_scalar
or preferablyNote::commitment
instead).
[0.8.1] - 2022-10-19
Added
zcash_primitives::legacy
:impl {Copy, Eq, Ord} for TransparentAddress
keys::AccountPrivKey::{to_bytes, from_bytes}
zcash_primitives::sapling::NullifierDerivingKey
- Added in
zcash_primitives::sapling::keys
DecodingError
Scope
ExpandedSpendingKey::from_bytes
ExtendedSpendingKey::{from_bytes, to_bytes}
zcash_primitives::sapling::note_encryption
:PreparedIncomingViewingKey
PreparedEphemeralPublicKey
- Added in
zcash_primitives::zip32
ChainCode::as_bytes
DiversifierIndex::{as_bytes}
- Implementations of
From<u32>
andFrom<u64>
forDiversifierIndex
zcash_primitives::zip32::sapling
has been added and now contains all of the Sapling zip32 key types that were previously located inzcash_primitives::zip32
directly. The basezip32
module reexports the moved types for backwards compatibility.DiversifierKey::{from_bytes, as_bytes}
ExtendedSpendingKey::{from_bytes, to_bytes}
zcash_primitives::transaction::Builder
constructors:Builder::new_with_fee
Builder::new_with_rng_and_fee
zcash_primitives::transaction::TransactionData::fee_paid
zcash_primitives::transaction::components::amount::BalanceError
- Added in
zcash_primitives::transaction::components::sprout
Bundle::value_balance
JSDescription::net_value
- Added in
zcash_primitives::transaction::components::transparent
Bundle::value_balance
TxOut::recipient_address
- Implementations of
memuse::DynamicUsage
for the following types:zcash_primitives::block::BlockHash
zcash_primitives::consensus
:BlockHeight
MainNetwork
,TestNetwork
,Network
NetworkUpgrade
,BranchId
zcash_primitives::sapling
:keys::Scope
note_encryption::SaplingDomain
zcash_primitives::transaction
:TxId
components::sapling::CompactOutputDescription
components::sapling::{OutputDescription, OutputDescriptionV5}
zcash_primitives::zip32::AccountId
Changed
- Migrated to
group 0.13
,orchard 0.3
,zcash_address 0.2
,zcash_encoding 0.2
. zcash_primitives::sapling::ViewingKey
now storesnk
as aNullifierDerivingKey
instead of as a barejubjub::SubgroupPoint
.- The signature of
zcash_primitives::sapling::Note::nf
has changed to take just aNullifierDerivingKey
(the only capability it actually required) rather than the fullViewingKey
as its first argument. - Made the internals of
zip32::DiversifierKey
private; usefrom_bytes
andas_bytes
on this type instead. zcash_primitives::sapling::note_encryption
APIs now expose precomputations explicitly (where previously they were performed internally), to enable users to avoid recomputing incoming viewing key precomputations. Users now need to callPreparedIncomingViewingKey::new
to convert theirSaplingIvk
s into their precomputed forms, and can do so wherever it makes sense in their stack.SaplingDomain::IncomingViewingKey
is nowPreparedIncomingViewingKey
instead ofSaplingIvk
.try_sapling_note_decryption
andtry_sapling_compact_note_decryption
now take&PreparedIncomingViewingKey
instead of&SaplingIvk
.
Removed
zcash_primitives::legacy::Script::address
This method was not generally safe to use on arbitrary scripts, only on script_pubkey values. Its functionality is now available viazcash_primitives::transaction::components::transparent::TxOut::recipient_address
[0.8.0] - 2022-10-19
This release was yanked because it depended on the wrong versions of zcash_address
and zcash_encoding
.
[0.7.0] - 2022-06-24
Changed
- Bumped dependencies to
equihash 0.2
,orchard 0.2
. zcash_primitives::consensus
:MainNetwork::activation_height
now returns the activation height forNetworkUpgrade::Nu5
.
[0.6.0] - 2022-05-11
Added
zcash_primitives::sapling::redjubjub::PublicKey::verify_with_zip216
, for controlling how RedJubjub signatures are validated.PublicKey::verify
has been altered to always use post-ZIP 216 validation rules.zcash_primitives::transaction::Builder::with_progress_notifier
, for setting a notification channel on which transaction build progress updates will be sent.zcash_primitives::transaction::Txid::{read, write, from_bytes}
zcash_primitives::sapling::NoteValue
a typesafe wrapper for Sapling note values.zcash_primitives::consensus::BranchId::{height_range, height_bounds}
functions to provide range values for branch active heights.zcash_primitives::consensus::NetworkUpgrade::Nu5
value representing the Nu5 upgrade.zcash_primitives::consensus::BranchId::Nu5
value representing the Nu5 consensus branch.- New modules under
zcash_primitives::transaction::components
for building parts of transactions:sapling::builder
for Sapling transaction components.transparent::builder
for transparent transaction components.tze::builder
for TZE transaction components.orchard
parsing and serialization for Orchard transaction components.
zcash_primitives::transaction::Authorization
a trait representing a type-level record of authorization types that correspond to signatures, witnesses, and proofs for each Zcash sub-protocol (transparent, Sprout, Sapling, TZE, and Orchard). This type makes it possible to encode a type-safe state machine for the application of authorizing data to a transaction; implementations of this trait represent different states of the authorization process.- New bundle types under the
zcash_primitives::transaction
submodules, one for each Zcash sub-protocol. These are now used instead of bare fields within theTransactionData
type.components::sapling::Bundle
bundle of Sapling transaction elements. This new struct is parameterized by a type bounded on a newly addedsapling::Authorization
trait which is used to enable static reasoning about the state of Sapling proofs and authorizing data, as described above.components::transparent::Bundle
bundle of transparent transaction elements. This new struct is parameterized by a type bounded on a newly addedtransparent::Authorization
trait which is used to enable static reasoning about the state of transparent witness data, as described above.components::tze::Bundle
bundle of TZE transaction elements. This new struct is parameterized by a type bounded on a newly addedtze::Authorization
trait which is used to enable static reasoning about the state of TZE witness data, as described above.
zcash_primitives::serialize
has been factored out as a newzcash_encoding
crate, which can be found in thecomponents
directory.zcash_primitives::transaction::components::Amount
now implementsmemuse::DynamicUsage
, to enableorchard::Bundle<_, Amount>::dynamic_usage
.zcash_primitives::zip32::diversifier
has been renamed tofind_sapling_diversifier
andsapling_diversifier
has been added.find_sapling_diversifier
searches the diversifier index space, whereassapling_diversifier
just attempts to use the provided diversifier index and returnsNone
if it does not produce a valid diversifier.zcash_primitives::zip32::DiversifierKey::diversifier
has been renamed tofind_diversifier
and thediversifier
method has new semantics.find_diversifier
searches the diversifier index space to find a diversifier index which produces a valid diversifier, whereasdiversifier
just attempts to use the provided diversifier index and returnsNone
if it does not produce a valid diversifier.zcash_primitives::zip32::ExtendedFullViewingKey::address
has been renamed tofind_address
and theaddress
method has new semantics.find_address
searches the diversifier index space until it obtains a valid diversifier, and returns the address corresponding to that diversifier, whereasaddress
just attempts to create an address corresponding to the diversifier derived from the provided diversifier index and returnsNone
if the provided index does not produce a valid diversifier.zcash_primitives::zip32::ExtendedSpendingKey.derive_internal
has been added to facilitate the derivation of an internal (change) spending key. This spending key can be used to spend change sent to an internal address corresponding to the associated full viewing key as specified in ZIP 316..zcash_primitives::zip32::ExtendedFullViewingKey.derive_internal
has been added to facilitate the derivation of an internal (change) spending key. This spending key can be used to spend change sent to an internal address corresponding to the associated full viewing key as specified in ZIP 32.zcash_primitives::zip32::sapling_derive_internal_fvk
provides the internal implementation ofExtendedFullViewingKey.derive_internal
but does not require a complete extended full viewing key, just the full viewing key and the diversifier key. In the future, this function will likely be refactored to become a member function of a newDiversifiableFullViewingKey
type, which represents the ability to derive IVKs, OVKs, and addresses, but not child viewing keys.zcash_primitives::sapling::keys::DiversifiableFullViewingKey::change_address
has been added as a convenience method for obtaining the change address at the default diversifier. This address MUST NOT be encoded and exposed to users. User interfaces should instead mark these notes as "change notes" or "internal wallet operations".- A new module
zcash_primitives::legacy::keys
has been added under thetransparent-inputs
feature flag to support types related to supporting transparent components of unified addresses and derivation of OVKs for shielding funds from the transparent pool. - A
zcash_primitives::transaction::components::amount::Amount::sum
convenience method has been added to facilitate bounds-checked summation of account values. - The
zcash_primitives::zip32::AccountId
, a type-safe wrapper for ZIP 32 account indices. - In
zcash_primitives::transaction::components::amount
:impl Sum<&Amount> for Option<Amount>
Changed
- MSRV is now 1.56.1.
- Bumped dependencies to
ff 0.12
,group 0.12
,bls12_381 0.7
,jubjub 0.9
,bitvec 1
. - The following modules and helpers have been moved into
zcash_primitives::sapling
:zcash_primitives::group_hash
zcash_primitives::keys
zcash_primitives::sapling::keys::{prf_expand, prf_expand_vec, OutgoingViewingKey}
have all been moved into to the this module to reflect the fact that they are used outside of the Sapling protocol.
zcash_primitives::pedersen_hash
zcash_primitives::primitives::*
(moved intozcash_primitives::sapling
)zcash_primitives::prover
zcash_primitives::redjubjub
zcash_primitives::util::{hash_to_scalar, generate_random_rseed}
- Renamed
zcash_primitives::transaction::components::JSDescription
toJsDescription
(matching Rust naming conventions). zcash_primitives::transaction::TxId
contents is now private.- Renamed
zcash_primitives::transaction::components::tze::hash
tozcash_primitives::transaction::components::tze::txid
zcash_primitives::transaction::components::tze::TzeOutPoint
constructor now taxes a TxId rather than a raw byte array.zcash_primitives::transaction::components::Amount
addition, subtraction, and summation now returnOption
rather than panicing on overflow.zcash_primitives::transaction::builder
:Error
has been modified to wrap the error types produced by its child builders.Builder::build
no longer takes a consensus branch ID parameter. The builder now selects the correct consensus branch ID for the given target height.
- The
zcash_primitives::transaction::TransactionData
struct has been modified such that it now contains common header information, and then contains a separateBundle
value for each sub-protocol (transparent, Sprout, Sapling, and TZE) and an Orchard bundle value has been added.TransactionData
is now parameterized by a type bounded on the newly addedzcash_primitives::transaction::Authorization
trait. This bound has been propagated to the individual transaction builders, such that the authorization state of a transaction is clearly represented in the type and the presence or absence of witness and/or proof data is statically known, instead of being only determined at runtime via the presence or absence ofOption
al values. zcash_primitives::transaction::components::sapling
parsing and serialization have been adapted for use with the newsapling::Bundle
type.zcash_primitives::transaction::Transaction
parsing and serialization have been adapted for use with the newTransactionData
organization.- Generators for property testing have been moved out of the main transaction module such that they are now colocated in the modules with the types that they generate.
- The
ephemeral_key
field ofOutputDescription
has had its type changed fromjubjub::ExtendedPoint
tozcash_note_encryption::EphemeralKeyBytes
. - The
epk: jubjub::ExtendedPoint
field ofCompactOutputDescription
has been replaced byephemeral_key: zcash_note_encryption::EphemeralKeyBytes
. - The
zcash_primitives::transaction::Builder::add_sapling_output
method now takes itsMemoBytes
argument as a required field rather than an optional one. If the empty memo is desired, useMemoBytes::from(Memo::Empty)
explicitly.
[0.5.0] - 2021-03-26
Added
- Support for implementing candidate ZIPs before they have been selected for a
network upgrade, behind the
zfuture
feature flag.- At runtime, these ZIPs are gated behind the new
NetworkUpgrade::ZFuture
enum case, which is inaccessible without thezfuture
feature flag. This pseudo-NU can be enabled for private testing using a custom implementation of theParameters
trait.
- At runtime, these ZIPs are gated behind the new
- New structs and methods:
zcash_primitives::consensus
:BlockHeight
- New methods on the
Parameters
trait:coin_type
hrp_sapling_extended_spending_key
hrp_sapling_extended_full_viewing_key
hrp_sapling_payment_address
b58_pubkey_address_prefix
b58_script_address_prefix
- The
Network
enum, which enables code to be generic over the network type at runtime.
zcash_primitives::memo
:MemoBytes
, a minimal wrapper around the memo bytes, that only imposes the existence of null-padding for shorter memos.MemoBytes
is guaranteed to be round-trip encodable (modulo null padding).Memo
, an enum that implements the memo field format defined in ZIP 302. It can be converted to and fromMemoBytes
.
zcash_primitives::primitives::Nullifier
struct.zcash_primitives::transaction
:TxVersion
enum, representing the set of valid transaction format versions.SignableInput
enum, encapsulating per-input data used when creating transaction signatures.
zcash_primitives::primitives::SaplingIvk
, a newtype wrapper aroundjubjub::Fr
values that are semantically Sapling incoming viewing keys.
- Test helpers, behind the
test-dependencies
feature flag:zcash_primitives::prover::mock::MockTxProver
, for building transactions in tests without creating proofs.zcash_primitives::transaction::Builder::test_only_new_with_rng
constructor which accepts a non-CryptoRng
randomness source (for e.g. deterministic tests).proptest
APIs for generating arbitrary Zcash types.
- New constants:
zcash_primitives::consensus
:H0
, the height of the genesis block.MAIN_NETWORK
TEST_NETWORK
zcash_primitives::constants::{mainnet, testnet, regtest}
modules, containing network-specific constants.zcash_primitives::note_encryption
:ENC_CIPHERTEXT_SIZE
OUT_CIPHERTEXT_SIZE
zcash_primitives::transaction::components::amount
:COIN
MAX_MONEY
- More implementations of standard traits:
zcash_primitives::consensus
:Parameters: Clone
MainNetwork: PartialEq
TestNetwork: PartialEq
zcash_primitives::legacy
:Script: PartialEq
TransparentAddress: Clone + PartialOrd + Hash
zcash_primitives::redjubjub::PublicKey: Clone
zcash_primitives::transaction
:Transaction: Clone
TransactionData: Clone + Default
components::Amount: Eq + PartialOrd + Ord
components::TxIn: Clone + PartialEq
components::TxOut: PartialEq
components::SpendDescription: Clone
components::OutputDescription: Clone
components::SproutProof: Clone
components::JSDescription: Clone
zcash_primitives::zip32::DiversifierIndex: Default
Changed
- MSRV is now 1.47.0.
- Trial decryption using the APIs in
zcash_primitives::note_encryption
is now over 60% faster at detecting which notes are relevant.- Part of this improvement was achieved by changing the APIs to take
epk
as a&jubjub::ExtendedPoint
instead of a&SubgroupPoint
.
- Part of this improvement was achieved by changing the APIs to take
- Various APIs now take the network parameters as an explicit variable instead
of a type parameter:
zcash_primitives::consensus::BranchId::for_height
- The
zcash_primitives::note_encryption
APIs. zcash_primitives::transaction::builder
:SaplingOutput::new
Builder::new
Builder::new_with_rng
Parameters::activation_height
andParameters::is_nu_active
now take&self
.
zcash_primitives::merkle_tree::CommitmentTree::new
has been renamed toCommitmentTree::empty
.zcash_primitives::note_encryption
:SaplingNoteEncryption::new
now takesMemoBytes
.- The following APIs now return
MemoBytes
:try_sapling_note_decryption
try_sapling_output_recovery
try_sapling_output_recovery_with_ock
zcash_primitives::primitives::SaplingIvk
is now used where functions previously used undistinguishedjubjub::Fr
values; this affects Sapling note decryption and handling of IVKs by the wallet backend code.zcash_primitives::primitives::ViewingKey::ivk
now returnsSaplingIvk
zcash_primitives::primitives::Note::nf
now returnsNullifier
.zcash_primitives::transaction
:- The
overwintered
,version
, andversion_group_id
properties of theTransaction
andTransactionData
structs have been replaced byversion: TxVersion
. components::amount::DEFAULT_FEE
is now 1000 zatoshis, following ZIP 313.- The
nullifier
property ofcomponents::SpendDescription
now has the typeNullifier
. signature_hash
andsignature_hash_data
now take aSignableInput
argument instead of atransparent_input
argument.builder::SaplingOutput::new
andbuilder::Builder::add_sapling_output
now takeOption<MemoBytes>
.
- The
Removed
zcash_primitives::note_encryption::Memo
(replaced byzcash_primitives::memo::{Memo, MemoBytes}
).
[0.4.0] - 2020-09-09
Added
zcash_primitives::note_encryption::OutgoingCipherKey
- a symmetric key that can be used to recover a single Sapling output. This will eventually be used to implement Sapling payment disclosures.
Changed
- MSRV is now 1.44.1.
zcash_primitives::note_encryption
:SaplingNoteEncryption::new
now takesOption<OutgoingViewingKey>
. Setting this toNone
prevents the note from being recovered from the block chain by the sender.- The
rng: &mut R
parameter (whereR: RngCore + CryptoRng
) has been changed torng: R
to enable this use case.
- The
prf_ock
now returnsOutgoingCipherKey
.try_sapling_output_recovery_with_ock
now takes&OutgoingCipherKey
.
zcash_primitives::transaction::builder
:SaplingOutput::new
andBuilder::add_sapling_output
now takeOption<OutgoingViewingKey>
(exposing the new unrecoverable note option).
- Bumped dependencies to
ff 0.8
,group 0.8
,bls12_381 0.3.1
,jubjub 0.5.1
,secp256k1 0.19
.
[0.3.0] - 2020-08-24
TBD
[0.2.0] - 2020-03-13
TBD
[0.1.0] - 2019-10-08
Initial release.