zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Clarify a note about SU-CMA security for signatures. 

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2016-09-26 17:24:55 +01:00
parent 414610c5ac
commit c56507447c
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
protocol/protocol.tex
View File

@ -1298,10 +1298,10 @@ pair without access to the signing key.
In fact the instantiation of $\JoinSplitSig$ uses a scheme designed In fact the instantiation of $\JoinSplitSig$ uses a scheme designed
for security under adaptive attack even when multiple signatures are for security under adaptive attack even when multiple signatures are
signed under the same key. signed under the same key.
\item SU-CMA security requires it to be infeasible for the adversary to \item SU-CMA security requires it to be infeasible for the adversary, not
forge a distinct signature on a previously seen message. That is, knowing the private key, to forge a distinct signature on a previously
\joinSplitSignatures are intended to be nonmalleable in the sense of seen message. That is, \joinSplitSignatures are intended to be
\cite{BIP-62}. nonmalleable in the sense of \cite{BIP-62}.
\end{pnotes} \end{pnotes}
@ -3558,6 +3558,7 @@ The errors in the proof of Ledger Indistinguishability mentioned in
\item Update the section on encoding of \transparent addresses. \item Update the section on encoding of \transparent addresses.
(The precise prefixes are not decided yet.) (The precise prefixes are not decided yet.)
\item Clarify why $\Blake{\ell}$ is different from truncated $\Blake{512}$. \item Clarify why $\Blake{\ell}$ is different from truncated $\Blake{512}$.
\item Clarify a note about SU-CMA security for signatures.
\item Add a paragraph about key length in \crossref{inbandrationale}. \item Add a paragraph about key length in \crossref{inbandrationale}.
\item Add acknowledgements for John Tromp, Paige Peterson, Maureen Walsh, \item Add acknowledgements for John Tromp, Paige Peterson, Maureen Walsh,
Jay Graber, and Jack Gavigan. Jay Graber, and Jack Gavigan.