diff --git a/zip-0032.html b/zip-0032.html
index 4eefe83f..02bde6c1 100644
--- a/zip-0032.html
+++ b/zip-0032.html
@@ -624,11 +624,15 @@ License: MIT
of a hierarchical deterministic wallet is given by:
-
- \(\mathsf{BLAKE2b}\text{-}\mathsf{256}(\texttt{“Zcash_HD_Seed_FP”}, S)\)
+ \(\mathsf{BLAKE2b}\text{-}\mathsf{256}(\texttt{“Zcash_HD_Seed_FP”},\)
+ \([\texttt{0x20}]\,||\,S)\)
.
It MAY be used to uniquely identify a particular hierarchical deterministic wallet.
No corresponding short tag is defined.
+ Note: a previous version of this specification did not have the
+ \(\texttt{0x20}\)
+ byte prefixing the seed. The current specification reflects the implementation in zcashd.
Specification: Key Encodings
diff --git a/zip-0032.rst b/zip-0032.rst
index 0ad8ebdb..de9ab242 100644
--- a/zip-0032.rst
+++ b/zip-0032.rst
@@ -410,12 +410,15 @@ Seed Fingerprints
A "seed fingerprint" for the master seed :math:`S` of a hierarchical deterministic wallet is given by:
-* :math:`\mathsf{BLAKE2b}\text{-}\mathsf{256}(\texttt{“Zcash_HD_Seed_FP”}, S)`.
+* :math:`\mathsf{BLAKE2b}\text{-}\mathsf{256}(\texttt{“Zcash_HD_Seed_FP”},`:math:`[\texttt{0x20}]\,||\,S)`.
It MAY be used to uniquely identify a particular hierarchical deterministic wallet.
No corresponding short tag is defined.
+Note: a previous version of this specification did not have the :math:`\texttt{0x20}` byte prefixing the seed.
+The current specification reflects the implementation in `zcashd`.
+
Specification: Key Encodings
============================