From 1089f384fa4e4b94f310d7aa2292f8fe1e399b9e Mon Sep 17 00:00:00 2001 From: Vivek Arte Date: Tue, 16 May 2023 16:42:55 +0530 Subject: [PATCH 1/4] making recommended changes to the circuit statement --- zip-0226.html | 4 ++-- zip-0226.rst | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/zip-0226.html b/zip-0226.html index b9426e8d9..10b634d7c 100644 --- a/zip-0226.html +++ b/zip-0226.html @@ -275,11 +275,11 @@

Asset Identifier Consistency for Split Actions

-

The following constraints must be added to prevent senders from changing the Asset Base for the output note in a Split Action:

+

Senders must not be able to change the Asset Base for the output note in a Split Action. We do this via the following constraints:

Value Commitment

@@ -339,7 +339,9 @@ \(\psi' = \psi^{old}\) . (Otherwise \(\psi'\) - should be sampled randomly.) + should be sampled uniformly at random on + \(\mathbb{F}_{q_{\mathbb{P}}}\) + .) @@ -376,7 +378,7 @@
  1. We require that \(\forall (\mathsf{AssetBase},\mathsf{v^{AssetBase}}) \in \mathsf{assetBurn}\ ,\ \mathsf{AssetBase} \neq \mathcal{V}^{\mathsf{Orchard}}\) - . That is, Native Assets are not allowed to be burnt.
    2. + . That is, ZEC or TAZ is not allowed to be burnt.
  2. We require that for every \(\forall (\mathsf{AssetBase},\mathsf{v^{AssetBase}}) \in \mathsf{assetBurn}\ ,\ \mathsf{v^{AssetBase}} \neq 0\) .
    3. diff --git a/zip-0226.rst b/zip-0226.rst index fe431704f..763863162 100644 --- a/zip-0226.rst +++ b/zip-0226.rst @@ -102,7 +102,7 @@ Let :math:`\mathsf{Note^{OrchardZSA}}` be the type of a ZSA note, i.e. A ZSA note differs from an Orchard note [#protocol-notes]_ by additionally including the Asset Base, :math:`\mathsf{AssetBase}^{\mathsf{Orchard}}`. So a ZSA note is a tuple :math:`(\mathsf{g_d, pk_d, v, \rho, \psi, \mathsf{AssetBase}^{\mathsf{Orchard}}})`, where -- :math:`\mathsf{AssetBase}^{\mathsf{Orchard}} : \mathbb{P}*` is the unique element of the Pallas group [#protocol-pallasandvesta]_ that identifies each Asset in the Orchard protocol, defined as the Asset Base in ZIP 227 [#zip-0227]_. The byte representation of the Asset Base is defined as :math:`\mathsf{asset\_base} : \mathbb{B}^{[\ell_{\mathbb{P}}]} := \mathsf{repr}_{\mathbb{P}}(\mathsf{AssetBase}^{\mathsf{Orchard}})`. +- :math:`\mathsf{AssetBase}^{\mathsf{Orchard}} : \mathbb{P}*` is the unique element of the Pallas group [#protocol-pallasandvesta]_ that identifies each Asset in the Orchard protocol, defined as the Asset Base in ZIP 227 [#zip-0227]_, a valid non-bottom group element that is not the identity. The byte representation of the Asset Base is defined as :math:`\mathsf{asset\_base} : \mathbb{B}^{[\ell_{\mathbb{P}}]} := \mathsf{repr}_{\mathbb{P}}(\mathsf{AssetBase}^{\mathsf{Orchard}})`. Specifically, we define the note commitment scheme :math:`\mathsf{NoteCommit^{OrchardZSA}_{rcm}}` as follows: From de46ec82d1625d88c7b301cf94329ab91a77285f Mon Sep 17 00:00:00 2001 From: Vivek Arte Date: Tue, 23 May 2023 18:51:37 +0530 Subject: [PATCH 3/4] making recommended changes to the circuit statement section --- zip-0226.html | 2 +- zip-0226.rst | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/zip-0226.html b/zip-0226.html index e6acb8c33..25e87dad8 100644 --- a/zip-0226.html +++ b/zip-0226.html @@ -264,7 +264,7 @@

Value Commitment Correctness

-

The following constraints must be added to ensure that the value commitment is computed using the witnessed Asset Base, as represented in the notes:

+

The following constraints must be added to ensure that the value commitment is computed using the witnessed Asset Base: