zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

The return type of $GroupHash^{\mathbb{J}^{(r)*}}$ in \crossref{concretegrouphashjubjub} 

was incorrectly given as $\mathbb{J}^{(r)*}$, rather than the correct
$\mathbb{J}^{(r)*} \cup \{\bot\}$.

Signed-off-by: Daira Emma Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Emma Hopwood 2023-03-02 14:18:07 +00:00
parent 5f0bed973e
commit 04db180f3c
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
protocol/protocol.tex
View File

@ -10837,7 +10837,7 @@ Let $D \typecolon \byteseq{8}$ be an $8$-byte domain separator, and
let $M \typecolon \byteseqs$ be the hash input.
\introlist
The hash $\GroupJHash{\URS}(D, M) \typecolon \SubgroupJstar$ is calculated as follows:
The hash $\GroupJHash{\URS}(D, M) \typecolon \maybe{\SubgroupJstar}$ is calculated as follows:
\begin{algorithm}
\item let $\HashOutput = \BlakeTwos{256}(D,\, \URS \bconcat\, M)$
@ -14654,6 +14654,8 @@ Peter Newell's illustration of the Jubjub bird, from \cite{Carroll1902}.
\begin{itemize}
\item Change Daira Emma Hopwood's name.
\sapling{
\item The return type of $\GroupJHash{}$ in \crossref{concretegrouphashjubjub} was
incorrectly given as $\SubgroupJstar$, rather than the correct $\maybe{\SubgroupJstar}$.
\item In the discussion of partitioning oracle attacks on \note encryption in \crossref{inbandrationale},
we now use the fact that $\DiversifiedTransmitBase$ has order greater than the maximum value of
$\InViewingKey$, rather than assuming that $\DiversifiedTransmitBase$ is a non-zero point