zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,005 Commits 42 Branches 258 Tags 532 MiB
Commit Graph

1005 Commits

Author SHA1 Message Date
Daira Hopwood da7c6fe190 Correct the statement and proof of Theorem A.3.2. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 11:21:02 +01:00
Daira Hopwood 25b64382e4 Clarify the notes concerning domain separation of prefixes for MerkleCRH^Sapling and NoteCommit^Sapling. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 11:00:45 +01:00
Daira Hopwood 2a7002a010 Add the QED-it report to the acknowledgements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:45:19 +01:00
Daira Hopwood bc48ebe898 Improved cross-referencing in Pedersen hash section. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:43:48 +01:00
Daira Hopwood 74c39f073d Correct a use of \GroupJ that should have been \MontCurve. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:34:56 +01:00
Daira Hopwood 691922ebd1 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:27:34 +01:00
Daira Hopwood dc81e21c2b Correct uses of LEOS2IP_l in RedDSAVerify and RedDSABatchVerify to ensure l is a multiple of 8. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:27:34 +01:00
Daira Hopwood 5524822ed5 Correct some uses of r_J that should have been r_S or q. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:27:34 +01:00
Daira Hopwood dc41de37f3 Avoid clashing notation. Refer to the Montgomery form of Jubjub as \mathbb{M}. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-10-01 10:27:34 +01:00
Jack Grigg 975a2aaa64
Formatting 2018-09-20 11:05:25 +01:00
Ariel cb1e663836
Improve explanation of diversifier sequence choice 2018-09-20 12:11:13 +03:00
Jack Grigg 888681c0b0
Update references to Sapling protocol spec 2018-09-18 11:42:29 +01:00
Jack Grigg 606abd14e2
Be explicit about supported range for the Sapling key path 2018-09-18 11:40:19 +01:00
Jack Grigg 44e9c03d45
dk_i -> dk in "Diversifier derivation" section 2018-09-18 11:39:52 +01:00
Jack Grigg 1f7b5120f1
Clarify that dk is not part of the standard Sapling derivation 2018-09-18 11:38:54 +01:00
Jack Grigg a414e4e7d3
Pull in definition of hardened notation 2018-09-18 11:37:55 +01:00
Jack Grigg 55e3cd177e
Clarify wording about default payment addresses 2018-09-18 11:25:12 +01:00
Daira Hopwood 88e255b63f Regenerate PDFs. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood 3ecbe6b903 The rest for beta-30 (sorry, I have a flight to catch). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood b909f2a482 Add dates to Change History. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood a1f90a56cf Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood bfc9ba5b21 Add security argument about DiversifyHash. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood 5fd898adea Makefile fixes and improvements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood 5361fc591e Cosmetics (pagination in Appendix A). 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood 2cf4dfacef Correct the description of the N-ary AND optimization (not used in Sapling): 
a run of N-1 one bits in c yields an N-ary AND.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-09-02 09:06:22 +01:00
Daira Hopwood 2eec56d936 Add specification for seed fingerprints. 2018-09-01 18:39:41 +01:00
Daira Hopwood 08b8427e91 Don't use 'X' to abbreviate 'extended', since it is ambiguous with 'expanded'. 2018-09-01 18:39:08 +01:00
Daira Hopwood 2aee30ca10 Use the same notation for r_J as the spec. 2018-09-01 18:36:39 +01:00
bitcartel 37da8b64e4
Merge pull request #171 from str4d/zip-243-updates 
ZIP 243 updates
 2018-08-28 23:04:04 -07:00
Jack Grigg b4abd7fb9b
Fix bugs in ZIP 243 reference implementation 
Closes #170.
 2018-08-23 15:34:00 +01:00
Jack Grigg 111d0a5cd7
ZIP 243 test vectors 2018-08-23 15:32:38 +01:00
Daira Hopwood 58a12371d1 Regenerate PDFs. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-15 15:42:35 +01:00
Daira Hopwood 3049a53843 Remove a resolved TODO. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-15 15:40:35 +01:00
Daira Hopwood 4d1cb63baf Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-15 15:38:15 +01:00
Daira Hopwood 8364aff29c Change the description of BLAKE2s to correct the constraint count and to describe batched equality checks performed by the sapling-crypto implementation. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-15 15:07:23 +01:00
Daira Hopwood ad0479ac77 Finish the description of range checks in Appendix A. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-15 14:52:50 +01:00
Daira Hopwood bc6a430edc Regenerate PDFs. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-14 10:45:52 +01:00
Daira Hopwood 0351335662 Minor corrections to affine Edwards variable-base multiplication in Appendix A. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-14 10:43:05 +01:00
Daira Hopwood 3b16c62958 Finish the Appendix A description of BLAKE2s. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-14 10:41:40 +01:00
Daira Hopwood 5d8fe05d37 Regenerate PDFs. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 17:21:08 +01:00
Daira Hopwood 10019825e9 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:57:38 +01:00
Daira Hopwood 324d634a29 Define "represented subgroup". 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:57:23 +01:00
Daira Hopwood 36bcc8f3f0 Correct the Change History entry of this version for Sprout. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:57:07 +01:00
Daira Hopwood 745da1e36d Minor improvement to the type of z_j used in RedDSA batch verification. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:35:58 +01:00
Daira Hopwood a902df4c5c Correct the description of Groth16 batch verification 
to explicitly take account of how verification depends on primary inputs.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:35:26 +01:00
Daira Hopwood f90012ce5e Clarify order checking for proof elements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:33:03 +01:00
Daira Hopwood 05d72a4b71 Add Charles Rackoff, Rafail Ostrovsky, and Amit Sahai to the acknowledgements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:30:21 +01:00
Daira Hopwood 998cb2ff95 Cosmetics. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:28:59 +01:00
Daira Hopwood 81598de991 Notational changes: 
- Use a superscript (r) to mark the subgroup order, instead of a subscript.
- Use G^{(r)∗} for the set of r_G-order points in G.
(r)
- Mark the subgroup order in pairing groups, e.g. use G_1^{(r)} instead of G_1.
- Make the bit-representation indicator (five-pointed star) an affix instead of a superscript.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-12 16:24:15 +01:00
Daira Hopwood b605fe1061 Cosmetics and minor wording improvements. 
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
 2018-08-11 21:09:53 +01:00