diff --git a/zip-0216.html b/zip-0216.html index c8e284d0..1c018d3a 100644 --- a/zip-0216.html +++ b/zip-0216.html @@ -72,9 +72,11 @@ Discussions-To: <https://g \(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + 1)\) and \(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + q_{\mathbb{J}} - 1)\) - . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to - \(31\) - zero bytes followed by a + . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to a + \(\mathtt{0x01}\) + byte, followed by + \(30\) + zero bytes, and then a \(\mathtt{0x80}\) byte.

Once this ZIP activates, the following places within the Sapling consensus protocol where Jubjub points occur MUST reject non-canonical Jubjub point encodings.

diff --git a/zip-0216.rst b/zip-0216.rst index ed0c0496..6cfb5190 100644 --- a/zip-0216.rst +++ b/zip-0216.rst @@ -90,8 +90,8 @@ Non-normative note: There are two such bit sequences, :math:`\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + 1)` and :math:`\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + q_{\mathbb{J}} - 1)`. The Sapling protocol uses little-endian ordering when converting between bit and -byte sequences, so the first of these sequences corresponds to :math:`31` zero bytes -followed by a :math:`\mathtt{0x80}` byte. +byte sequences, so the first of these sequences corresponds to a :math:`\mathtt{0x01}` +byte, followed by :math:`30` zero bytes, and then a :math:`\mathtt{0x80}` byte. Once this ZIP activates, the following places within the Sapling consensus protocol where Jubjub points occur MUST reject non-canonical Jubjub point encodings.