zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
880 Commits 42 Branches 258 Tags 532 MiB
Commit Graph

631 Commits

Author SHA1 Message Date
Daira Hopwood e083d27e82 Add a consensus rule that valueBalance is in the range {-MAX_MONEY..MAX_MONEY}. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:49:48 +01:00
Daira Hopwood 4525a1fffd Refine the caveat about the claimed security of shielded transactions. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:49:48 +01:00
Daira Hopwood 7aa8765dc0 Enforce stronger constraints on the types of pk_d, ak, nk, cv, epk, and rk, and ensure esk is not zero when encrypting. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:49:43 +01:00
Daira Hopwood 0617ca2aae Instantiate PRF^ock, and correct some types. Also enforce that esk is canonical. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:48:25 +01:00
Daira Hopwood eb6a8c7d62 Type changes for cmu in an Output description. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:14:27 +01:00
Daira Hopwood 57f16ea6da Refactoring/type changes for commitment randomness and outputs. 
This also affects the type of Sapling note plaintexts.
Includes potential consensus changes (which *should* match the implementation)!

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:14:16 +01:00
Daira Hopwood cb730f241e Wording, cross-referencing, and minor type improvements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:11:46 +01:00
Daira Hopwood 8dd6074164 More cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:11:46 +01:00
Daira Hopwood 1f02902d6e Clarify that the square root notation refers to the positive square root. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:11:46 +01:00
Daira Hopwood 8c80decd3b Group Hash and DiversifyHash refactoring. Also fix an error in the definition of set difference. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:11:30 +01:00
Daira Hopwood f480f351b7 Generalize PRF^expand to accept an arbitrary-length input. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 0334dde7a2 Resolve a potential ambiguity in use of the ?: notation by adding parentheses. 
This addresses a Least Authority comment.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood a35f4275a1 Clarify the wording of the abstract. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood da298474ea Add Jubjub bird image to the title page and cite Carroll references. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 4a144dec07 Change the background for the Overwinter and Sapling spec to white, indicating that it is no longer a draft. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood c9f6d7ae07 Change the notation for a multiplication constraint to avoid potential confusion with cartesian product. 
This addresses a Least Authority comment.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 51c84b7556 Cosmetics, mainly spacing. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 8abebf4296 Type corrections and precision improvements. Also add more cross-references. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 4035e4c5e0 Correct a reference. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood 11163742b7 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood ce35640ec0 Remove the consensus rule "If nJoinSplit > 0, the transaction MUST NOT use SIGHASH types other than SIGHASH_ALL.", 
which was never implemented.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-06-22 22:08:45 +01:00
Daira Hopwood ae491d4a4b cm in an Output description encodes only the u-coordinate of the note commitment, not the full curve point. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:28:08 +01:00
Daira Hopwood 48d9fcbc79 Change the notation H^\star to H^\circledast in the description of RedDSA, to avoid confusion with the ^\star convention for representations of group elements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:20 +01:00
Daira Hopwood 1c61ec5cf9 Correct a reference to RedDSA.RandomizePrivate that was intended to be RedDSA.RandomizePublic. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:20 +01:00
Daira Hopwood 30f4dfc545 Correct an error in the computation of generators for Pedersen hashes. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:20 +01:00
Daira Hopwood 62f0c6a49b Correct the statement about FindGroupHash^J never returning \bot. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:20 +01:00
Daira Hopwood b59e8d45b5 Minor improvements to cross-references. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:20 +01:00
Daira Hopwood d236700a8d Ensure \AuthSignBase (\mathcal{G}) is defined where used. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:26:13 +01:00
Daira Hopwood df02fcf9ac Make the public key prefix part of the input to the hash function in RedDSA, not part of the message. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:14:07 +01:00
Daira Hopwood 0517e2dc3a Change terminology describing constraint systems. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:14:07 +01:00
Daira Hopwood 05094f8641 Correct a type error in RedDSA.Sign. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:14:07 +01:00
Daira Hopwood 3c0198fb99 Correct a type error in the definition of GroupHash^J. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:14:06 +01:00
Daira Hopwood 5dce44d0a0 Fix the description of the Sapling balancing value. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-22 23:14:06 +01:00
Daira Hopwood 7b6df9f623 Correct the order of arguments to RedDSA.Randomize{Private,Public}. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-18 21:21:41 +01:00
Daira Hopwood f4facef8c8 Add Michael Dixon and Andrew Poelstra to acknowledgements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-05-18 21:18:40 +01:00
Daira Hopwood 275aee328b Minor clarifications. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 13:28:34 +01:00
Daira Hopwood 76e1213c8b Remove redundant crossref. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:52:08 +01:00
Daira Hopwood 0481da1724 Minor corrections. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:14 +01:00
Daira Hopwood fdfd9a6760 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood a7eda35419 Clarify the security argument for balance in \Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood 06b0a6e79f Correct a subtle problem with the type of the value input to ValueCommit. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood b11064a39c Fix the loss of tightness in the use of PRF^nfSapling by specifying the keyspace more precisely. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood 62429657d0 Be more careful about which notes are normative. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood 1ad35c6a59 Correct type ambiguities for rho in Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 03:43:13 +01:00
Daira Hopwood df2f80f13b Specify the representation of i in group G_2 of BLS-381. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-23 01:42:16 +01:00
Daira Hopwood b5effeea70 Cosmetics (pagination). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 11:57:38 +01:00
Daira Hopwood f41b95b72f Fix a bug in the definition of DefaultDiversifier. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 11:57:00 +01:00
Daira Hopwood 2e2200a0bc Add \maybe macro. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 11:56:12 +01:00
Daira Hopwood 8ca0f473f5 Type clarification. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 08:19:56 +01:00
Daira Hopwood 80ec1b52ce Clarify the authority obtained by a delegated prover. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 08:19:35 +01:00
Daira Hopwood ab4e2c2f7a [BLS2002] shouldn't be cited only for the Change History in Sprout version of the spec. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:37:53 +01:00
Daira Hopwood bf03ab51fc Specify KA^Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:29:14 +01:00
Daira Hopwood 7481181d43 Complete the algorithm for generating dummy Sapling input notes. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:29:14 +01:00
Daira Hopwood 8c0e7b85f4 8 -> h_J for Jubjub cofactor. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:29:07 +01:00
Daira Hopwood 31578a6f3c bellman uses combined parameter files. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:28:03 +01:00
Daira Hopwood 4dfdfd74d4 Corrections and clarifications. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:27:55 +01:00
Daira Hopwood b086930d5a Add references for BLS and BN curves. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:25:15 +01:00
Daira Hopwood 34714e064c Add DefaultDiversifier. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:25:15 +01:00
Daira Hopwood 741fb7a4be Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:25:15 +01:00
Daira Hopwood 60a43d3894 Acknowledge Brian Warner, Mary Maller, and Least Authority. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:25:14 +01:00
Daira Hopwood 65c6bef43a OutputIndex is no longer needed. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-21 07:25:14 +01:00
Daira Hopwood b447deaac8 Correct an error in the specifications of the G1/2 generators. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:44:16 +01:00
Daira Hopwood 95193a22df Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:44:16 +01:00
Daira Hopwood 25ed3f0043 Overwinter consensus cleanups. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 5b54c35a41 Add Sprout block chain scanning algorithm. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 6a5e901530 Add circuit constraint section on conditional equality. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 633ca00f25 Specify the randomness beacon. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 3909fe6897 Specify support for BIP 111 (NODE_BLOOM service bit). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 49ab63e322 Correct explanation of commitments in overview to apply to Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 9cfe4b9243 Move the section on Sprout dummy notes. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood 69762401ec Caveat the claim about note traceability set in the overview. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:23:20 +01:00
Daira Hopwood fa9bd00e49 Explicitly note that outputs from coinbase transactions include Founders' Reward outputs. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:22:06 +01:00
Daira Hopwood 36cfb95cec Sprout only -> Pre-Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:22:06 +01:00
Daira Hopwood 1a383e60f7 Sapling consensus changes. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:22:06 +01:00
Daira Hopwood 6e6704411d Curve25519 -> \KASproutCurve; Ed25519 clarifications. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-20 04:19:28 +01:00
Daira Hopwood 7234e33f21 References for optimal ate pairings. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-19 18:53:52 +01:00
Daira Hopwood 07221bc89c Change citation keys to abbreviate fewer author names; other minor bibliography fixes. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-19 18:49:29 +01:00
Daira Hopwood 2bb48c67eb Cosmetics and minor corrections. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-19 18:03:52 +01:00
Daira Hopwood 34181a7701 Refactor signature definitions and add public-to-private key homomorphism abstraction. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-12 22:26:09 +01:00
Daira Hopwood 1fe6f0a0b1 Make the Description columns of tables ragged-right. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-11 07:46:34 +01:00
Daira Hopwood 052188d218 Move some of the LaTeX hacks around to put potentially document-independent stuff first. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-11 07:41:02 +01:00
Daira Hopwood cda5339eba Correct an error in the Montgomery addition formulae (the constraints were correct). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-10 21:48:35 +01:00
Daira Hopwood 2109a721e6 Cosmetics and trivial corrections. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-10 21:46:19 +01:00
Daira Hopwood 9d18ef7fe8 Bibliography cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-04-07 18:57:50 +01:00
Daira Hopwood 40ec72bb46 Add specification of Output statement. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-19 00:01:25 +00:00
Daira Hopwood d029d67779 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 23:57:09 +00:00
Daira Hopwood fc71b29163 Minor clarifications. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 23:54:36 +00:00
Daira Hopwood bffc16b0ee Updates to transaction format and consensus rules for Overwinter and Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 22:02:42 +00:00
Daira Hopwood a6245e3f68 Clarify conversions between bit and byte sequences. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:45:27 +00:00
Daira Hopwood 9498de38f9 Updates to Sapling construction, changing how the nullifier is computed and separating it from the randomized spend verifying key (rk). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:43:57 +00:00
Daira Hopwood 9d96abe629 Change MerkleDepth^Sapling from 29 to 32. Fixes #143 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:17 +00:00
Daira Hopwood d63c0f5f0f Clarify bit ordering of SHA-256 and SHA256Compress. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:17 +00:00
Daira Hopwood 5cac8e9b6a The first rule of Fork Club is: We don't talk about "forks". 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:17 +00:00
Daira Hopwood 108fa4daa0 Add DiversifyHash, and change the type of diversifiers to a bit sequence. 
Fix the generation of diversified addresses to repeatedly try diversifiers.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:17 +00:00
Daira Hopwood 752156da97 Minor corrections and improvements; add missing notation definitions. 
Remove things from Sprout spec that shouldn't be there.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:17 +00:00
Daira Hopwood a8052562e4 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:16 +00:00
Daira Hopwood b19733320c Replace \nstrut hack (for consistent spacing in table of contents) with a better, less intrusive hack. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-18 21:00:16 +00:00
Daira Hopwood aeab72d534 Update Change History. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-11 21:36:55 +00:00
Daira Hopwood 2fa37c1f1f Improve security definitions for signatures. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-11 21:31:33 +00:00
Daira Hopwood cd930a18be Clean up diversification. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-03-11 21:31:18 +00:00