From d4cddc061506d7a9948bca740716767ba3598fa5 Mon Sep 17 00:00:00 2001
From: Daira Hopwood <daira@jacaranda.org>
Date: Tue, 21 Sep 2021 11:16:13 +0100
Subject: [PATCH] ZIP 316: correct wording that assumed zero padding (i.e. had
 not been updated for inclusion of HRP).

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
---
 zip-0316.html |  4 ++--
 zip-0316.rst  | 10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/zip-0316.html b/zip-0316.html
index e6c86c8a..b170abc4 100644
--- a/zip-0316.html
+++ b/zip-0316.html
@@ -447,8 +447,8 @@ c^{n+m}}{q}.\)</span>
                         <span class="math">\(\ell^\mathsf{MAX}_M\)</span>
                      bytes; otherwise it applies
                         <span class="math">\(\mathsf{F4Jumble}^{-1}.\)</span>
-                     It rejects any result that does not end in the expected padding, before stripping these 16 bytes and parsing the result.</p>
-                    <p>(48 bytes is the minimum size of a valid UA, UFVK, or UIVK raw encoding plus 16 zero bytes, corresponding to a single Sapling Incoming Viewing Key.
+                     It rejects any result that does not end in the expected 16-byte padding, before stripping these 16 bytes and parsing the result.</p>
+                    <p>(48 bytes is the minimum size of a valid UA, UFVK, or UIVK raw encoding plus 16 bytes of padding, corresponding to a single Sapling Incoming Viewing Key.
                         <span class="math">\(\ell^\mathsf{MAX}_M\)</span>
                      bytes is the largest input/output size supported by
                         <span class="math">\(\mathsf{F4Jumble}.\)</span>
diff --git a/zip-0316.rst b/zip-0316.rst
index 4512ec6c..d6654a44 100644
--- a/zip-0316.rst
+++ b/zip-0316.rst
@@ -634,13 +634,13 @@ before encoding the result with Bech32m.
 The Consumer rejects any Bech32m-decoded byte sequence that is less than
 48 bytes or greater than :math:`\ell^\mathsf{MAX}_M` bytes; otherwise it
 applies :math:`\mathsf{F4Jumble}^{-1}.` It rejects any result that does
-not end in the expected padding, before stripping these 16 bytes and
-parsing the result.
+not end in the expected 16-byte padding, before stripping these 16 bytes
+and parsing the result.
 
 (48 bytes is the minimum size of a valid UA, UFVK, or UIVK raw encoding
-plus 16 zero bytes, corresponding to a single Sapling Incoming Viewing Key.
-:math:`\ell^\mathsf{MAX}_M` bytes is the largest input/output size
-supported by :math:`\mathsf{F4Jumble}.`)
+plus 16 bytes of padding, corresponding to a single Sapling Incoming
+Viewing Key. :math:`\ell^\mathsf{MAX}_M` bytes is the largest input/output
+size supported by :math:`\mathsf{F4Jumble}.`)
 
 Heuristic analysis
 ''''''''''''''''''