From 587e8f7e705aefbb7a9207365b0102ce46fb25ed Mon Sep 17 00:00:00 2001
From: str4d <jack@electriccoin.co>
Date: Wed, 2 Jun 2021 03:36:21 +0100
Subject: [PATCH 1/2] ZIP 216: Fix description of non-canonical identity
 encoding

---
 zip-0216.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/zip-0216.rst b/zip-0216.rst
index ed0c0496..6cfb5190 100644
--- a/zip-0216.rst
+++ b/zip-0216.rst
@@ -90,8 +90,8 @@ Non-normative note: There are two such bit sequences,
 :math:`\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + 1)` and
 :math:`\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + q_{\mathbb{J}} - 1)`.
 The Sapling protocol uses little-endian ordering when converting between bit and
-byte sequences, so the first of these sequences corresponds to :math:`31` zero bytes
-followed by a :math:`\mathtt{0x80}` byte.
+byte sequences, so the first of these sequences corresponds to a :math:`\mathtt{0x01}`
+byte, followed by :math:`30` zero bytes, and then a :math:`\mathtt{0x80}` byte.
 
 Once this ZIP activates, the following places within the Sapling consensus protocol
 where Jubjub points occur MUST reject non-canonical Jubjub point encodings.

From 6ec85a6014fcf4383a465178bbd845a3b6d3370d Mon Sep 17 00:00:00 2001
From: Daira Hopwood <daira@jacaranda.org>
Date: Wed, 2 Jun 2021 12:53:44 +0100
Subject: [PATCH 2/2] ZIP 216: regenerate HTML.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
---
 zip-0216.html | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/zip-0216.html b/zip-0216.html
index c8e284d0..1c018d3a 100644
--- a/zip-0216.html
+++ b/zip-0216.html
@@ -72,9 +72,11 @@ Discussions-To: &lt;<a href="https://github.com/zcash/zips/issues/400">https://g
                 <span class="math">\(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + 1)\)</span>
              and
                 <span class="math">\(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + q_{\mathbb{J}} - 1)\)</span>
-            . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to
-                <span class="math">\(31\)</span>
-             zero bytes followed by a
+            . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to a
+                <span class="math">\(\mathtt{0x01}\)</span>
+             byte, followed by
+                <span class="math">\(30\)</span>
+             zero bytes, and then a
                 <span class="math">\(\mathtt{0x80}\)</span>
              byte.</p>
             <p>Once this ZIP activates, the following places within the Sapling consensus protocol where Jubjub points occur MUST reject non-canonical Jubjub point encodings.</p>