zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update viewing key encoding. 

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2017-12-17 00:10:09 +00:00
parent 2b883b7182
commit 179752ae57
1 changed files with 31 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

46
protocol/protocol.tex
View File

@ -483,8 +483,9 @@ electronic commerce and payment, financial privacy, proof of work, zero knowledg
\newcommand{\PaymentAddressLeadByte}{\hexint{16}} \newcommand{\PaymentAddressLeadByte}{\hexint{16}}
\newcommand{\PaymentAddressSecondByte}{\hexint{9A}} \newcommand{\PaymentAddressSecondByte}{\hexint{9A}}
\newcommand{\InViewingKey}{\mathsf{ivk}} \newcommand{\InViewingKey}{\mathsf{ivk}}
\newcommand{\ViewingKeyLeadByte}{\hexint{0B}} \newcommand{\InViewingKeyLeadByte}{\hexint{A8}}
\newcommand{\ViewingKeySecondByte}{\hexint{1C}} \newcommand{\InViewingKeySecondByte}{\hexint{AB}}
\newcommand{\InViewingKeyThirdByte}{\hexint{D3}}
\newcommand{\SpendingKeyLeadByte}{\hexint{AB}} \newcommand{\SpendingKeyLeadByte}{\hexint{AB}}
\newcommand{\SpendingKeySecondByte}{\hexint{36}} \newcommand{\SpendingKeySecondByte}{\hexint{36}}
\newcommand{\PtoSHAddressLeadByte}{\hexint{1C}} \newcommand{\PtoSHAddressLeadByte}{\hexint{1C}}
@ -493,8 +494,9 @@ electronic commerce and payment, financial privacy, proof of work, zero knowledg
\newcommand{\PtoPKHAddressSecondByte}{\hexint{B8}} \newcommand{\PtoPKHAddressSecondByte}{\hexint{B8}}
\newcommand{\PaymentAddressTestnetLeadByte}{\hexint{16}} \newcommand{\PaymentAddressTestnetLeadByte}{\hexint{16}}
\newcommand{\PaymentAddressTestnetSecondByte}{\hexint{B6}} \newcommand{\PaymentAddressTestnetSecondByte}{\hexint{B6}}
\newcommand{\ViewingKeyTestnetLeadByte}{\hexint{0B}} \newcommand{\InViewingKeyTestnetLeadByte}{\hexint{A8}}
\newcommand{\ViewingKeyTestnetSecondByte}{\hexint{2A}} \newcommand{\InViewingKeyTestnetSecondByte}{\hexint{AC}}
\newcommand{\InViewingKeyTestnetThirdByte}{\hexint{0C}}
\newcommand{\SpendingKeyTestnetLeadByte}{\hexint{AC}} \newcommand{\SpendingKeyTestnetLeadByte}{\hexint{AC}}
\newcommand{\SpendingKeyTestnetSecondByte}{\hexint{08}} \newcommand{\SpendingKeyTestnetSecondByte}{\hexint{08}}
\newcommand{\PtoSHAddressTestnetLeadByte}{\hexint{1C}} \newcommand{\PtoSHAddressTestnetLeadByte}{\hexint{1C}}
@ -3606,24 +3608,29 @@ components are derived from a \spendingKey as described in \crossref{keycomponen
\introlist \introlist
The raw encoding of an \incomingViewingKey consists of, in order: The raw encoding of an \incomingViewingKey consists of, in order:
}
\vspace{2ex} \vspace{2ex}
\begin{equation*} \begin{equation*}
\begin{bytefield}[bitwidth=0.07em]{520} \begin{bytefield}[bitwidth=0.062em]{536}
\bitbox{80}{$8$-bit $\ViewingKeyLeadByte$} \changed{
\bitbox{80}{$8$-bit $\ViewingKeySecondByte$} \bitbox{88}{$8$-bit $\InViewingKeyLeadByte$}
\bitbox{88}{$8$-bit $\InViewingKeySecondByte$}
\bitbox{88}{$8$-bit $\InViewingKeyThirdByte$}
\bitbox{256}{$256$-bit $\AuthPublic$} \bitbox{256}{$256$-bit $\AuthPublic$}
\bitbox{256}{\changed{$256$}-bit $\TransmitPrivate$} \bitbox{256}{$256$-bit $\TransmitPrivate$}
}
\end{bytefield} \end{bytefield}
\end{equation*} \end{equation*}
\changed{
\begin{itemize} \begin{itemize}
\item Two bytes $[\ViewingKeyLeadByte, \ViewingKeySecondByte]$, \item Three bytes $[\InViewingKeyLeadByte, \InViewingKeySecondByte, \InViewingKeyThirdByte]$,
indicating this version of the raw encoding of a \Zcash \incomingViewingKey indicating this version of the raw encoding of a \Zcash \incomingViewingKey
on the production network. (Addresses on the test network use on the production network. (Addresses on the test network use
$[\ViewingKeyTestnetLeadByte, \ViewingKeyTestnetSecondByte]$ $[\InViewingKeyTestnetLeadByte, \InViewingKeyTestnetSecondByte, \InViewingKeyTestnetThirdByte]$
instead.) instead.)
\item 256 bits specifying $\AuthPublic$. \item 256 bits specifying $\AuthPublic$.
\item 256 bits specifying $\TransmitPrivate$, using the normal encoding \item 256 bits specifying $\TransmitPrivate$, using the normal encoding
of a Curve25519 private key \cite{Bern2006}. of a Curve25519 private key \cite{Bern2006}.
\end{itemize} \end{itemize}
@ -3634,9 +3641,9 @@ considered invalid if $\TransmitPrivate \neq \KAFormatPrivate(\TransmitPrivate)$
\pnote{ \pnote{
For addresses on the production network, the lead bytes and encoded length For addresses on the production network, the lead bytes and encoded length
cause the first two characters of the Base58Check encoding to be fixed as cause the first four characters of the Base58Check encoding to be fixed as
\ascii{VK}. For the test network, the first two characters are fixed as \ascii{ZiVK}. For the test network, the first four characters are fixed as
\ascii{VT}. \ascii{ZiVt}.
} }
} }
@ -4992,6 +4999,15 @@ The errors in the proof of Ledger Indistinguishability mentioned in
\introlist \introlist
\nsection{Change history} \nsection{Change history}
\subparagraph{2017.0-beta-2.9}
\begin{itemize}
\item Refer to $\TransmitPrivate$ as a \receivingKey rather than as a
viewing key.
\item Updates for \incomingViewingKey support.
\end{itemize}
\introlist
\subparagraph{2017.0-beta-2.8} \subparagraph{2017.0-beta-2.8}
\begin{itemize} \begin{itemize}