Clarify the authority obtained by a delegated prover.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2018-04-21 08:19:35 +01:00
parent ab4e2c2f7a
commit 80ec1b52ce
1 changed files with 4 additions and 2 deletions

View File

@ -4248,8 +4248,10 @@ The $\spendAuthSig$ and $\ProofSpend$ are included in the \spendDescription.
\pnote{
If the spender is computationally or memory-limited, step 4 \MAY be delegated to a different
party that is capable of performing the \zkProof. In this case privacy will be lost to that
party since it needs the \fullViewingKey, but it will not obtain spending authority for
other \transactions, since it is not able to create a \spendAuthSignature by itself.
party since it needs the \authProvingKey; this allows deriving the $\AuthSignPublic$
and $\AuthProvePublic$ components of the \fullViewingKey, which are sufficient to recognize
spent \notes and to recognize and decrypt incoming \notes. However, it will not obtain spending
authority for other \transactions, since it is not able to create a \spendAuthSignature by itself.
} %pnote
} %sapling