https://g
\(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + 1)\)
and
\(\mathsf{I2LEOSP}_{\ell_{\mathbb{J}}}(2^{255} + q_{\mathbb{J}} - 1)\)
- . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to
- \(31\)
- zero bytes followed by a
+ . The Sapling protocol uses little-endian ordering when converting between bit and byte sequences, so the first of these sequences corresponds to a
+ \(\mathtt{0x01}\)
+ byte, followed by
+ \(30\)
+ zero bytes, and then a
\(\mathtt{0x80}\)
byte.
Once this ZIP activates, the following places within the Sapling consensus protocol where Jubjub points occur MUST reject non-canonical Jubjub point encodings.